last executing test programs: 5.485122208s ago: executing program 5 (id=8983): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) 5.376135523s ago: executing program 5 (id=8984): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}}) 5.218258836s ago: executing program 5 (id=8987): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x40, 0x12, 0x49, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.898781733s ago: executing program 0 (id=9003): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd6002000b00482f00fe880000000000000000000000000001fe8000000000000000000000000000aa24206558"], 0x0) 3.551492665s ago: executing program 0 (id=9008): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) 3.445850137s ago: executing program 2 (id=9010): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) 3.378840886s ago: executing program 2 (id=9012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x4, 0xb3, 0x0, 0x3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.358700838s ago: executing program 1 (id=9013): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) 3.197010961s ago: executing program 2 (id=9015): bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x0, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)='`', &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) 2.585971244s ago: executing program 4 (id=9018): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xffffffff}, 0x1c) 2.385707202s ago: executing program 2 (id=9019): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@overriderock}, {@map_acorn}, {@nocompress}, {}, {@block={'block', 0x3d, 0x400}}, {@cruft}, {@unhide}, {@uid}, {@check_relaxed}]}, 0x1, 0xa00, &(0x7f00000003c0)="$eJzs3UtsXFf9B/Dv9SNx3SpJ2/z7L1XbTFKSuq1xbIcmRF2UxJ4kLn4g25EasWhK46AQQ6EBqa2QmkqIFRVIIBawq1jBplI3dIO6gx2sWCChrthXrMLK6M6M49eMx3YdO00/n+h67uN3z/nd58mMr+eEz5eF/SumFhZqwxanL/5hBzLmLnZ29JP3P3ivHN69mT3pzPPFn5KeJJWkK8mjSffI6PTURJuCrieXk3ycFEn2pv66IZdT/CIPLE1/nOJ3Zb0t7dloybSzwBfabp9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNypGRgcHh4o9GZu8+HKlLqmsMTI6PVVkYWHtksV16j6q9fpdfNS23qQoh/T0LHb1/ejBpcWPJKkcyeP1qcdrHZKnJ2/f/8iBFx7u6lhcv1U2n8nejRd74623r786Pz/3RuuQhXfq27A9ud1lzlcnx2amxibOnK9WxmamKqdPnhw8fuHcTOXc2Hh15tLMbHWiMjJdPTM7NV3pG3mmMnT69IlKdeDS1MXJ86MD49XFmae+Mjw4eLLy0sA3q2emZ6Ymj780MDNyYWx8fGzyfC2mXFzGnCpPxG+MzVZmq2cmKpWr1+bnTqzKqXP1zi6DhtptSRk03C5oeHB4eGhoeHjo3Ubv2bdnnHz+9POnBge7BlfJmog7dNJyd7mv9WHe5js4bF1Hvf3Pd8czlslczMupNP03ktFMZyoTLZY3LLb/R49X1613efvfaOW7li1+rPxxJE82JntatP8tctm5fzfyVt7O9bya+cxnLm/sekY7++98qpnMWGYylbFM5ExtTqUxp5LTOZmTGcwruZBDmUkl5zKW8VQzk0uZyWyqtTNqJNOp5kxmM5XpVNKXkTyTSoZyOqdzIpVUM5BLmcrFTOZ8RnOmVsrVXKvt9xPr5Hg7aGgjQcPrBK1uzMtzfXPtf/Ve/Z8gG7b9N3HYooVG+7+nfWjfyE4kBAAAAGy7L/01+w4+9Jd/JUWeqH0uf25svPribqcFAAAAbKPa43qPly/d5dgTPbX3/4O7nRYAAACwjYra39gVSXpzqD62+JdQPgQAAACAe0Tt9/9Ppji0NMP7fwAAALjHtP+O/bYRRf/i1/9WrtRfrzQi6lNF77mx8erAyNT4C0M5VvuWgSRPrC2tMym6a39+8GwO16MO99Zfe5dKLOvsKaOGBl4YyrM50tiQvqfKl6f6mkQO1yOfrkc+vTyyMysiT5SRAHCvO7JOe7zR9v/Z9Ncj+h+rNfldjzVpgwe1rABwt7jdx85/G12aNWn/GxFPtmr/v7rO+/8y4qFcPVR/pGAgr+X1zOdK+tN44uBQs1IXeyOoP4bQ3+bTgN7GIwt/P9WR/jWfB/Tc3tblsXMZTn/TTwSWlVss5nCiHtd5Z44BAOy0I+u2wxtr//vbvP/v9UghANxVbvdgv4mRdzYTPPfGjd3eRgBgJa00AAAAAAAAAAAAAAAAAAAAAAAAAAAAbL8NfYH/344l8/NzyRY6C9jySM9mMlx/pCM7lPOuj3Qm2a3aX8ym1yqP8Weo9I/3NVb/9+7v+XtuZJdvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyIIulsNr8j2ZtkMMnxnc/qzrm52wlsl8qeLa1W3MqtvJl9254PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXXOP7/ztSf72/PitdHcnRJJeTfGu3c9xOt3Y7gTujaB/yvXrg0vf/dyTdWSjSVT/sKbpHRqenJsqiir3l8k/e/+C9cmhf9tpeFcoCyhpWdC7RqGHZnO6Vaz1YW6t3dO7G9R+9/oPK6NnaiXl29tz46MT56a8vBT5SfJhUUh8WLeb7k6N//uWy2Y2OEooPyy1tbnW952r1jq6t9/+brd2i3g24Nj83XNY0W3159sffv/bmskUP5XDyVF/St7Km75RDi5oOr96fKxWfFj8r9uU3uVw7/uXeKBaK8hDtr23/fVevzc8NvPb6/JXbOb2zIqcDOZTkStKz8ZwOtT43a2ddR3dZ62AtqPxxsE1561pW4lCL/fpg7ZTp3dQ2VNpcX232eyOjE00z+tUPH86xTR/pY21qbKr4tPhncSH/yE+X9f/RUR7/o2l6dTYpoha57ExZvmzF5dVRj6xt+fDyBa+sLrPlVckd8PN8O1+7ffw7lt3/G8dqZ+5Hy2psfl0km78ufr9/TYuypNYiHVzVIjXuPq3WaeR5sB7VIs//y3P1MjdxR3muXYt9h67/3xZ9+U9u6v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4+xVJZ7P5HcnRJAeS7C+nK8nC6pibW6ivo7fYSprbZis5f/4ULTe0uJVbeTP7djojAAAAAAAAAO6Ms6OfvP/Be+VQ+318Z77c0VhSSbqSHCh+3T0yOj010aag7uTy4q/0ezaXw+XyxwNL0x+XU4+2WWl3Hx8AgM+1/wUAAP//p2dujQ==") mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 2.375947535s ago: executing program 1 (id=9020): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x4}]}}]}, 0x40}}, 0x0) 2.203616877s ago: executing program 4 (id=9021): r0 = syz_io_uring_setup(0x2189, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x4c, 0x1ffa, 0x0, 0x0, 0x0) 2.151343327s ago: executing program 2 (id=9022): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file2\x00', 0x8080, &(0x7f0000009600), 0x1, 0x957a, &(0x7f0000009640)="$eJzs/QXYZWWhuP+/AwzdIiICIqCE0khISHd3d3d3d6dIiISA0iAloKSFIoggiBgYdHfH/xpmMMYbjuf8z+/LOee+78t514619/vs57PXmr29HJ/VF11pwYGBcQeG9sH27501yaULjnfjsuMfN8bzu+963aSnD7t51KGbCfcftj1g2PbAgYGBQcOeZ9DQ2wYffvU1IwyMNDDkP39vzNFGH2HMgYHRh12df9h2jqGb0df+YL/3hosHOmQYg44c+uf9xhoYGBhjyIWtl7zpvCHj/YfHDxnXLf/yQqWtvsBii/7d6m9uIwy7e9Df73t/O9LQP6OvPjAw+vIDH/7+GLLv4H947P/LhvzO+R+5dOEjP4bf/b+u1RdYbInh/IcciyMOu22OIcf48MegseHf58/dNvkdw6Zw0LA5G+kfjpeP433/X2r1BRZdeuDDj+OBtQ5bfMn33j9vDj5+YGDwCQMDg08cGBh80sftUf89faxvvqqqqvpYWmDBWRcc8nl/uM8Do37wuZY+F+54xHZ7DgwMjDz0e+Lg04deHnzFB98Jq6qqqqqqqup/VgssOOtC8P1/3I/6/n/6XQ8e1/f/qqqqqqqqqv89LbHAgrMO+a4/3Pf/iT7q+/8VR588/dD/7f/8cwx91Lsf74uoqqqqqqqqqo9s0SXw+//kH/X9/8h7Jlq07/9VVVVVVVVV/3tacdZFFxr4h/+fvWE3T/PB/fT9f7bR9lnx4xpvVVVVVVVVVVVVVVVVVVVVVVVVVVVVVZWxd5+54aa/r/m+78Bw672/37B/FzDoilvuvvtjG+j/jAb967+H2P/jHtP/vw1xHvWiyQcGtl3l4x5KfQz9r1mrvv4/KX93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/ch6//P/8F2l31X3XjYrlPffu+pZ/79kRPuP2SH3TfYeeePaegfR/9X1/8f2GLQwMAw33G3GBgYWHaBFVeeZmBg4MxT7719qoG/3TfnkPvmHn/EgRHff+g07/88ZMIPeebph26GvJkGJvjbc1zx/vMv8d45Iw4abhD/0ETjrXXO5qu/Ntvw26k//HWM8MGFhRed47X33nvvvX+6cVijfsiDP3j+D17L8M7Dxj7NkLHPuPM228+40x57Tr/FNhtstslmm2w788xzzjHL7HPMPvNsM266xdabzDT054fM2eTv/zzo35mzMYefs2cW+Mc5G/61PTvKZDhnk3/0nL3/jJdNeu3lH8zZSP/mnH3w+w766DmbfIthv2jC/QcPrP/+1AwaGJjw4MEDuw+5MvMoAwMTHjJs34mG7DvP+CMMDBz/9xc65NIof3sPDtp/yD6rL7rSggMD4w7bY9x/Gdu/Hqf/+FImHHbQTnjAsO2BQ3/NuAN/fysOPvzqa0YYMhf/NB1jjjb6CGMODIw+7Or8w7ZzDd2MttMH+703XDzQIcMYdOTQP+831sDAwBhDLrwz7VKnDBnvcI///6L/0t///+I156C/vR8HDfszbJ+hXgsstsTff9f70zBk7kYcdtscQ0yGn7P/zv5lvJOPOjD5R4x30SUWnHXIzcPN/98OJXp/TXHu/SMNfW/NP8fQR737X0ah8U70EeNdYgEc70QfNd6J3llru6FP9d823uHOdUu//3P/f+dcN/DR57oR6fGb3Dnp8Oe6pT58iP90uvxgjkYZbqcPO9c9cPWj+w95/v0/+ly39JCxD/6nc90IAwMTHvTBuW7Iie/QwQPHD7kyy5Arhw0euGDIlVnfvzLawC1Drsyw0XZbbzzkhsP/ZV4Hv//bh55GDv535nXcf5nXA0b85784/un4/+CcPvx24pH+dedBw83rFvPueNsH8zr435zXD57/4I+e1/c/k/xjV+4/MOif52akgUUGBgamGjY3h/47czPRR8/Nv/uZZHTYf+jlTf520xOzrj/GB3Mz/Fz8R59JDv3Pzs3Zf5ubqd6/b4oRBkYe+f2P6jvOPPTnB1dnGTLUIT//5XwzzaC/vZ4POZ8vOtz5fNA/vBcG/cN0DBr2kWKkgYHRVx8YGH15ei3/sO/gf+fvJDo/jvsR411gwVkXGnIa+bC/j2k8l1y/83QDAwMjD31dg08fennwFR+8hv9MNN5RP3q8C8J4R/2o8S787q0P/RfGi3P9Ueedw/6dY2uSjz62hv/s+mHH1jRTDr1/xH8Z8ER/e4p3Z7tp3Q/maOThnvc/OrYO+88eW7cMjPhRc3P4vzM3k//3nHc2hv2Hn5vzL1nh5P/gnPwv/h88/+H/ybm5avK/nXcGthgeuP6n1n//5y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uA9Z/3//D9b/v3Dti08btmzh4CmOG2Ozj3u8H3P/p9f/H+b7T+v/bzbGcVOMMPC3+z5yffah+/yPXJ99jqGb0df+YL/h1wfngX74+uzXrHn2sf+P1mf/L/XBsfpvrMPZ+d9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7kPW/79l2Hb/TdZ+84xhC6EPPnTVvef7uMf7Mfd/ev3/Yb7/tP7/fHuveugIA3+77yPX/x+6j2P9/8Nu3njy/8nr/39wrLb+f/0H5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4nj9/0HDtgO3rDfbxMcM2Q65ft8Ru87+cY/3Y+7/6vr/o140+cDAtqt83EOpj6HO/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xw9b/Hxi6/v8HDZq/9wUG6///7+5D/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/7X8MYv/yfljFv+v549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/xv5Yxb/M/LHLP7fzB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7fyxyz+5+aPWfzPyx+z+J+fP2bx/3b+mMX/O/ljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+380fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+/lj1n8r8sfs/hfnz9m8b8hf8zi//38MYv/D/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/T/PHLP63549Z/H+WP2bx/3n+mMX/jvwxi/8v8scs/nfmj1n878ofs/j/Mn/M4n93/pjF/1f5Yxb/e/LHLP735o9Z/H+dP2bxvy9/zOJ/f/6Yxf83+WMW/wfyxyz+v80fs/g/mD9m8f9d/pjF//f5Yxb/P+SPWfz/mD9m8X8of8zi/6f8MYv/n/PHLP5/yR+z+P81f8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMW//fyxyT+71/M/1+z+A/KH7P4j5A/ZvEfMX/M4j9S/pjFf3D+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4fyJ/zOI/Qf6Yxf+T+WMW/wnzxyz+n8ofs/hPlD9m8f90/pjFf+L8MYv/Z/LHLP6T5I9Z/CfNH7P4T5Y/ZvH/bP6YxX/y/DGL/+fyxyz+U+SPWfynzB+z+E+VP2bx/3z+mMX/C/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8f9i/pjF/0v5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv8v549Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/yv5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvH/av6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8v5Y/ZvE/OX/M4v/1/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fyN/zOJ/Rv6Yxf+b+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bx/1b+mMX/3Pwxi/95+WMW//Pzxyz+384fs/h/J3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/u/ljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zi/738MYv/dfljFv/r88cs/jfkj1n8v58/ZvH/Qf6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvH/af6Yxf/2/DGL/8/yxyz+P88fs/jfkT9m8f9F/pjF/878MYv/XfljFv9f5o9Z/O/OH7P4/yp/zOJ/T/6Yxf/e/DGL/6/zxyz+9+WPWfzvzx+z+P8mf8zi/0D+mMX/t/ljFv8H88cs/r/LH7P4/z5/zOL/h/wxi/8f88cs/g/lj1n8/5Q/ZvH/c/6Yxf8v+WMW/7/mj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f8zi/17+mMR/xIH8MYv/oPwxi/8I+WMW/xHzxyz+I+WPWfwH549Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8n8scs/hPkj1n8P5k/ZvGfMH/M4v+p/DGL/0T5Yxb/T+ePWfwnzh+z+H8mf8ziP0n+mMV/0vwxi/9k+WMW/8/mj1n8J88fs/h/Ln/M4j9F/pjFf8r8MYv/VPljFv/P549Z/L+QP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/L+aPWfy/lD9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3L+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/kj9m8Z87f8ziP0/+mMV/3vwxi/98+WMW/6/mj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf9r+WMW/5Pzxyz+X88fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/838scs/mfkj1n8v5k/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9v5Y9Z/M/NH7P4n5c/ZvE/P3/M4v/t/DGL/3fyxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/L+bP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7fyx+z+F+XP2bxvz5/zOJ/Q/6Yxf/7+WMW/x/kj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8b88fs/j/LH/M4v/z/DGL/x35Yxb/X+SPWfzvzB+z+N+VP2bx/2X+mMX/7vwxi/+v8scs/vfkj1n8780fs/j/On/M4n9f/pjF//78MYv/b/LHLP4P5I9Z/H+bP2bxfzB/zOL/u/wxi//v88cs/n/IH7P4/zF/zOL/UP6Yxf9P+WMW/z/nj1n8/5I/ZvH/a/6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5Yxb/d/PHLP7v5Y9J/EcayB+z+A/KH7P4j5A/ZvEfMX/M4j9S/pjFf3D+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4fyJ/zOI/Qf6Yxf+T+WMW/wnzxyz+n8ofs/hPlD9m8f90/pjFf+L8MYv/Z/LHLP6T5I9Z/CfNH7P4T5Y/ZvH/bP6YxX/y/DGL/+fyxyz+U+SPWfynzB+z+E+VP2bx/3z+mMX/C/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8f9i/pjF/0v5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv8v549Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/yv5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvH/av6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8v5Y/ZvE/OX/M4v/1/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fyN/zOJ/Rv6Yxf+b+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bx/1b+mMX/3Pwxi/95+WMW//Pzxyz+384fs/h/J3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/u/ljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zi/738MYv/dfljFv/r88cs/jfkj1n8v58/ZvH/Qf6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvH/af6Yxf/2/DGL/8/yxyz+P88fs/jfkT9m8f9F/pjF/878MYv/XfljFv9f5o9Z/O/OH7P4/yp/zOJ/T/6Yxf/e/DGL/6/zxyz+9+WPWfzvzx+z+P8mf8zi/0D+mMX/t/ljFv8H88cs/r/LH7P4/z5/zOL/h/wxi/8f88cs/g/lj1n8/5Q/ZvH/c/6Yxf8v+WMW/7/mj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f8zi/17+mMR/8ED+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+1/DGL/8n5Yxb/r+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf8b+WMW/zPyxyz+38wfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+38scs/ufmj1n8z8sfs/ifnz9m8f92/pjF/zv5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/t/NH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/v5Y9Z/K/LH7P4X58/ZvG/IX/M4v/9/DGL/w/yxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+t+ePWfx/lj9m8f95/pjF/478MYv/L/LHLP535o9Z/O/KH7P4/zJ/zOJ/d/6Yxf9X+WMW/3vyxyz+9+aPWfx/nT9m8b8vf8zif3/+mMX/N/ljFv8H8scs/r/NH7P4P5g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvF/KH/M4v+n/DGL/5/zxyz+f8kfs/j/NX/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljFv/38sck/iMP5I9Z/Aflj1n8R8gfs/iPmD9m8R8pf8ziPzh/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8P5E/ZvGfIH/M4v/J/DGL/4T5Yxb/T+WPWfwnyh+z+H86f8ziP3H+mMX/M/ljFv9J8scs/pPmj1n8J8sfs/h/Nn/M4j95/pjF/3P5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOL/hfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+H8xf8zi/6X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/5X8MYv/3PljFv958scs/vPmj1n858sfs/h/NX/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+X8sfs/ifnD9m8f96/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5E/ZvE/I3/M4v/N/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4fyt/zOJ/bv6Yxf+8/DGL//n5Yxb/b+ePWfy/kz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/3fwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bx/17+mMX/uvwxi//1+WMW/xvyxyz+388fs/j/IH/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n97/pjF/2f5Yxb/n+ePWfzvyB+z+P8if8zif2f+mMX/rvwxi/8v88cs/nfnj1n8f5U/ZvG/J3/M4n9v/pjF/9f5Yxb/+/LHLP73549Z/H+TP2bxfyB/zOL/2/wxi/+D+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/4fyxyz+f8ofs/j/OX/M4v+X/DGL/1/zxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bP2bxfy9/TOI/ykD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+1/DGL/8n5Yxb/r+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf8b+WMW/zPyxyz+38wfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+38scs/ufmj1n8z8sfs/ifnz9m8f92/pjF/zv5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/t/NH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/v5Y9Z/K/LH7P4X58/ZvG/IX/M4v/9/DGL/w/yxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+t+ePWfx/lj9m8f95/pjF/478MYv/L/LHLP535o9Z/O/KH7P4/zJ/zOJ/d/6Yxf9X+WMW/3vyxyz+9+aPWfx/nT9m8b8vf8zif3/+mMX/N/ljFv8H8scs/r/NH7P4P5g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvF/KH/M4v+n/DGL/5/zxyz+f8kfs/j/NX/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljFv/38sck/qMO5I9Z/Aflj1n8R8gfs/iPmD9m8R8pf8ziPzh/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8P5E/ZvGfIH/M4v/J/DGL/4T5Yxb/T+WPWfwnyh+z+H86f8ziP3H+mMX/M/ljFv9J8scs/pPmj1n8J8sfs/h/Nn/M4j95/pjF/3P5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOL/hfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+H8xf8zi/6X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/5X8MYv/3PljFv958scs/vPmj1n858sfs/h/NX/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+X8sfs/ifnD9m8f96/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5E/ZvE/I3/M4v/N/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4fyt/zOJ/bv6Yxf+8/DGL//n5Yxb/b+ePWfy/kz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/3fwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bx/17+mMX/uvwxi//1+WMW/xvyxyz+388fs/j/IH/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n97/pjF/2f5Yxb/n+ePWfzvyB+z+P8if8zif2f+mMX/rvwxi/8v88cs/nfnj1n8f5U/ZvG/J3/M4n9v/pjF/9f5Yxb/+/LHLP73549Z/H+TP2bxfyB/zOL/2/wxi/+D+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/4fyxyz+f8ofs/j/OX/M4v+X/DGL/1/zxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bP2bxfy9/TOI/2kD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+1/DGL/8n5Yxb/r+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf8b+WMW/zPyxyz+38wfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+38scs/ufmj1n8z8sfs/ifnz9m8f92/pjF/zv5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/t/NH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/v5Y9Z/K/LH7P4X58/ZvG/IX/M4v/9/DGL/w/yxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+t+ePWfx/lj9m8f95/pjF/478MYv/L/LHLP535o9Z/O/KH7P4/zJ/zOJ/d/6Yxf9X+WMW/3vyxyz+9+aPWfx/nT9m8b8vf8zif3/+mMX/N/ljFv8H8scs/r/NH7P4P5g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvF/KH/M4v+n/DGL/5/zxyz+f8kfs/j/NX/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljFv/38sck/qMP5I9Z/Aflj1n8R8gfs/iPmD9m8R8pf8ziPzh/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8P5E/ZvGfIH/M4v/J/DGL/4T5Yxb/T+WPWfwnyh+z+H86f8ziP3H+mMX/M/ljFv9J8scs/pPmj1n8J8sfs/h/Nn/M4j95/pjF/3P5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOL/hfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+H8xf8zi/6X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/5X8MYv/3PljFv958scs/vPmj1n858sfs/h/NX/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+X8sfs/ifnD9m8f96/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5E/ZvE/I3/M4v/N/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4fyt/zOJ/bv6Yxf+8/DGL//n5Yxb/b+ePWfy/kz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/3fwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bx/17+mMX/uvwxi//1+WMW/xvyxyz+388fs/j/IH/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n97/pjF/2f5Yxb/n+ePWfzvyB+z+P8if8zif2f+mMX/rvwxi/8v88cs/nfnj1n8f5U/ZvG/J3/M4n9v/pjF/9f5Yxb/+/LHLP73549Z/H+TP2bxfyB/zOL/2/wxi/+D+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/4fyxyz+f8ofs/j/OX/M4v+X/DGL/1/zxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bP2bxfy9/TOI/xkD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+1/DGL/8n5Yxb/r+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf8b+WMW/zPyxyz+38wfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+38scs/ufmj1n8z8sfs/ifnz9m8f92/pjF/zv5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/t/NH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/v5Y9Z/K/LH7P4X58/ZvG/IX/M4v/9/DGL/w/yxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+t+ePWfx/lj9m8f95/pjF/478MYv/L/LHLP535o9Z/O/KH7P4/zJ/zOJ/d/6Yxf9X+WMW/3vyxyz+9+aPWfx/nT9m8b8vf8zif3/+mMX/N/ljFv8H8scs/r/NH7P4P5g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvF/KH/M4v+n/DGL/5/zxyz+f8kfs/j/NX/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljFv/38sck/mMO5I9Z/Aflj1n8R8gfs/iPmD9m8R8pf8ziPzh/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8P5E/ZvGfIH/M4v/J/DGL/4T5Yxb/T+WPWfwnyh+z+H86f8ziP3H+mMX/M/ljFv9J8scs/pPmj1n8J8sfs/h/Nn/M4j95/pjF/3P5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOL/hfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+H8xf8zi/6X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/5X8MYv/3PljFv958scs/vPmj1n858sfs/h/NX/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+X8sfs/ifnD9m8f96/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5E/ZvE/I3/M4v/N/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4fyt/zOJ/bv6Yxf+8/DGL//n5Yxb/b+ePWfy/kz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/3fwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bx/17+mMX/uvwxi//1+WMW/xvyxyz+388fs/j/IH/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n97/pjF/2f5Yxb/n+ePWfzvyB+z+P8if8zif2f+mMX/rvwxi/8v88cs/nfnj1n8f5U/ZvG/J3/M4n9v/pjF/9f5Yxb/+/LHLP73549Z/H+TP2bxfyB/zOL/2/wxi/+D+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/4fyxyz+f8ofs/j/OX/M4v+X/DGL/1/zxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bP2bxfy9/TOI/1kD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+1/DGL/8n5Yxb/r+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf8b+WMW/zPyxyz+38wfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+38scs/ufmj1n8z8sfs/ifnz9m8f92/pjF/zv5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/t/NH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/v5Y9Z/K/LH7P4X58/ZvG/IX/M4v/9/DGL/w/yxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+t+ePWfx/lj9m8f95/pjF/478MYv/L/LHLP535o9Z/O/KH7P4/zJ/zOJ/d/6Yxf9X+WMW/3vyxyz+9+aPWfx/nT9m8b8vf8zif3/+mMX/N/ljFv8H8scs/r/NH7P4P5g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvF/KH/M4v+n/DGL/5/zxyz+f8kfs/j/NX/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljFv/38sck/mMP5I9Z/Aflj1n8R8gfs/iPmD9m8R8pf8ziPzh/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8P5E/ZvGfIH/M4v/J/DGL/4T5Yxb/T+WPWfwnyh+z+H86f8ziP3H+mMX/M/ljFv9J8scs/pPmj1n8J8sfs/h/Nn/M4j95/pjF/3P5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOL/hfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+H8xf8zi/6X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/5X8MYv/3PljFv958scs/vPmj1n858sfs/h/NX/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+X8sfs/ifnD9m8f96/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5E/ZvE/I3/M4v/N/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4fyt/zOJ/bv6Yxf+8/DGL//n5Yxb/b+ePWfy/kz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/3fwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bx/17+mMX/uvwxi//1+WMW/xvyxyz+388fs/j/IH/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n97/pjF/2f5Yxb/n+ePWfzvyB+z+P8if8zif2f+mMX/rvwxi/8v88cs/nfnj1n8f5U/ZvG/J3/M4n9v/pjF/9f5Yxb/+/LHLP73549Z/H+TP2bxfyB/zOL/2/wxi/+D+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/4fyxyz+f8ofs/j/OX/M4v+X/DGL/1/zxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bP2bxfy9/TOI/zkD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP7Y/4+d+4/auq7vOH7dwA2Yc0rOz6CFkbo0N+Jn0Ay35qmdaCc2T2yn4848cIqIhXMpx6i2I4W/ZhkWGokpoImE/AgwJFEglpOtlTads+aysmzocDp/zZ/sXHDfyH37hsmXfb+e4/vx+IP7vu7b96XwPC+ui8M5Zul/if6hLP2/oH8oS/95+oey9L9U/1CW/l/UP5Sl/5f0D2XpP1//UJb+l+kfytL/cv1DWfp/Wf9Qlv4L9A9l6f8V/UNZ+l+hfyhL/4X6h7L0v1L/UJb+X9U/lKX/VfqHsvS/Wv9Qlv6L9A9l6b9Y/1CW/kv0D2Xpf43+oSz9r9U/lKX/1/QPZel/nf6hLP2X6h/K0v96/UNZ+i/TP5Sl/9f1D2Xpv1z/UJb+N+gfytJ/hf6hLP1X6h/K0n+V/qEs/VfrH8rS/xv6h7L0X6N/KEv/tfqHsvRfp38oS/8b9Q9l6f9N/UNZ+q/XP5Sl/036h7L036B/KEv/b+kfytL/Zv1DWfpv1D+Upf8t+oey9L9V/1CW/pv0D2Xpv1n/UJb+W/QPZen/bf1DWfpv1T+Upf/f6R/K0v87+oey9L9N/1CW/n+vfyhL/9v1D2Xpv03/UJb+/6B/KEv/f9Q/lKX/d/UPZen/T/qHsvT/nv6hLP2/r38oS/879A9l6X+n/qEs/X+gfyhL/3/WP5Sl/136h7L0v1v/UJb+/6J/KEv/e/QPZen/r/qHsvS/V/9Qlv4/1D+Upf+P9A9l6f9v+oey9L9P/1CW/v+ufyhL/x/rH8rS/379Q1n6/0T/UJb+P9U/lKX/z/QPZen/gP6hLP1/rn8oS/9f6B/K0v9B/UNZ+v9S/1CW/v+hfyhL/+36h7L0f0j/UJb+D+sfytL/P/UPZem/Q/9Qlv6P6B/K0v+/9A9l6f+o/qEs/R/TP5Sl/3/rH8rS/3H9Q1n6P6F/KEv/J/UPZen/lP6hLP2f1j+Upf//6B/K0v8Z/UNZ+j+rfyhL/+f0D2Xp/7z+oSz9X9A/lKX/i/qHsvTfqX8oSf8jWvqHsvTv0D+UpX8f/UNZ+vfVP5Slfz/9Q1n6d+ofytK/v/6hLP0H6B/K0n+g/qEs/Q/RP5Sl/+v0D2Xpf6j+oSz9f0X/UJb+h+kfytL/V/UPZel/uP6hLP2P0D+Upf8g/UNZ+r9e/1CW/kfqH8rS/9f0D2Xpf5T+oSz9i/6hLP1/Xf9Qlv6D9Q9l6T9E/1CW/m/QP5Sl/2/oH8rS/436h7L0H6p/KEv/o/UPZen/Jv1DWfoP0z+Upf+b9Q9l6X+M/qEs/Y/VP5Sl/3H6h7L0/039Q1n6v0X/UJb+x+sfytL/BP1DWfq/Vf9Qlv4n6h/K0v+39A9l6f/b+oey9B+ufyhL/7fpH8rSf4T+oSz9R+ofytJ/lP6hLP1H6x/K0n+M/qEs/cfqH8rS/+36h7L0H6d/KEv/8fqHsvR/h/6hLP1/R/9Qlv4n6R/K0v+d+oey9J+gfyhL/5P1D2Xp/7v6h7L0/z39Q6+5/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdTv7k5/62NSZM6ed5ROf+MQnez55tX9nAgAA/r+99Kb/1f4vAQAAAAAAAAAAAAAAAAAAgLya+N+Jvdo/RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhYEyf9/o6+HT2+1HfvB0O/N23Xx7FPf/CjS/5s0ODuj13f/sPgKfvs/WDnzp07Lxn6x6d2PRzQarXa/7Z3dT0e2Pu4/fxzHrzx3t2PypxFb1x5yqBbJ71+3qGPzj5nw9CFnbu+2tma8pEZM6eN7NNqlbmdrdntB6M6Wq1yQWfr0vaD0e0HF3a2lrUfjNn14JDWlvaDt33ozJkfbn/hosq/ZvBaMXHSnFbfHott9fjdYO/9z3nwgQ3dH/fzlN3P1q/Vtf9jVrz3tF7f67aP/Xc/f/lM7/0f8E8Q2KcD2v8v3zKs++N+nvJlr/+f3/TWc6Pv7XP/e56/fNb+oT7B+/8eG931fv/oAY/s4/1/9PvAnvvV64euau//pFmztnd9qd8ref/f/vftflTm9t5/nx7v/9vv48/rfv8/oNUq5x/kLwekMnHSZ3bs7/W/x/73+rj7u/3e0OumY+/9bz3r5Bnt/d8xZ90NXV/qPMD9n7e/1/+1c3r+twIHZuKkJTt7vf6/fP97ve73ev0/PnjKPft/evwfvLu9//vOvO39e33v/97/nucv5/fe/4hZZ/zViLM/+anhM86YOn3a9Gl/OWrUO8aPHjd+3KixI3a9Jdj940H+qkAOr+j1f9/7f12vm45Wa9qe+0OnjNne3v/kh5f/SdeXBh7g/i/Y7+v/Yq//EDqmT6t//9bsqbNmnTVq94/dD0fv/nH3Pxbs/+V//t/n/o89oesf6/47w45Wa/Ce+9M3jX2xvf8Zt3/iyK4v9T/A/V+43/1v6fl3lcCBOcjX/w/3uumx/8tPXXFde/8DF2y+s+tLr+zP/y/t/6L97X/dMK//cDAmTmrV+iLa3v/9v7jps9Wuy9/6+z+oTxP7f3zQ0gnVrsvF9g/1aWL/G848bHm16/I5+4f6NLH/0+bNeE+16/J5+4f6NLH/QY9tvavadbnE/qE+Tez/5M67zqh2Xb5g/1CfJvZ/zqdnP1ftusyzf6hPE/v/9oLvP1Xtulxq/1CfJvZ/8fZpU6pdly/aP9Snif0vHTrrx9Wuy5fsH+rTxP53fOj+91a7LvPtH+rTxP4Pn7vx+mrX5TL7h/o0sf93v3DEqGrX5XL7h/o0sf+PHtIxr9p1+bL9Q32a2P+xn1g+pNp1WWD/UJ8m9v/nm46bXO26fMX+oT5N7L9smbe12nW5wv6hPk3s/6SxV/91teuy0P6hPk3s/+Pve/tD1a7LlfYP9Wli//OXn9pZ7bp81f6hPk3s/967n51f7bpcZf9Qnyb2/8Swh4dXuy5X2z/Up4n9bz79XRurXZdF9g/1aWL/C5+5YFy167LY/qE+Tez/BxcOX1ztuiyxf6hPE/t/4ewJR1e7LtfYP9Snif2vP2zBRdWuy7X2D/VpYv+Tdzw+vdp1+Zr9Q32a2P+b5n/wsWrX5Tr7h/o0sf8x0yf+UbXrstT+oT5N7H/2kJ/9sNp1ud7+oT5N7L//nTMvq3Zdltk/1KeJ/b9/1e19ql2Xr9s/1KeJ/U897Z5bql2X5fYP9Wli/yce9zcnVrsuN9g/1KeJ/W/7zpDbql2XFfYP9Wli/3NvXvuBatdlpf1DfZrY/+pJ1+6odl1W2T/Up4n9/3zkwE9Xuy6r7R/q08T+P3DfpnOqXZdv2D/Up4n9D77mqJ9Uuy5r7B/q08T+x/5pv9OrXZe19g/1aWL/556welu167LO/qE+Tez/qm3fPb7adbnR/qE+Tez/nvVT1lS7Lt+0f6hPE/t/9pSPH17tuqy3f6hPE/tfM+FHV1S7LjfZP9Snif3f8eTku6tdlw32D/VpYv/nfW7nKdWuy7fsH+rTxP6XnfvI89Wuy832D/VpYv8PdLznL6pdl432D/VpYv8dP33z+dWuyy32D/VpYv/vW3TxkdWuy632D/VpYv8f+diVK6tdl032D/VpYv/Djxr5zmrXZbP9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/LDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAIL8rQe5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAjwIAAP//5/M2DQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0c0586d, &(0x7f0000000180)={0x0, 0x5, 0x3fb}) 2.033170367s ago: executing program 4 (id=9023): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0}], 0x48}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x0) 1.982218428s ago: executing program 5 (id=9024): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 1.839514205s ago: executing program 5 (id=9025): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@uquota}]}, 0x1, 0x9847, &(0x7f000001c900)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x2f}, './file0\x00'}) 1.820788274s ago: executing program 1 (id=9026): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0x800}], "6c488b5caa166fb5a6f67eb635ba"}, 0x86) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r0) 1.808610369s ago: executing program 0 (id=9027): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x2, 0x2f, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10}, {0x18, 0x110, 0xc, 'c'}], 0x28, 0x500}}], 0x2, 0x0) 1.718030405s ago: executing program 4 (id=9029): socket$inet6(0xa, 0x1, 0x0) fanotify_init(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 1.560089517s ago: executing program 0 (id=9030): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 1.55465789s ago: executing program 1 (id=9031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 1.500712764s ago: executing program 0 (id=9032): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.500284678s ago: executing program 4 (id=9033): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2000000000b) 1.339066419s ago: executing program 1 (id=9034): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x7874d7f15d3d672e, '\x00', @b}) 1.224405015s ago: executing program 4 (id=9035): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000004c0)={0x0, 0x0, 0x49, "260e14c1e0b321d8fec05b84ca810cde7303fe32d78c07a2fab1fbc66b6fb62b6eb700064437b9969a34972abf55d2c6b4d87ec5c8aaefff878f5893497a12d7de93037fe862a44114"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.022173168s ago: executing program 3 (id=9036): syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 885.681172ms ago: executing program 3 (id=9037): set_mempolicy(0x3, &(0x7f0000000800)=0xfffffffffffffff9, 0x9) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000001140)=0x10000000) 701.720036ms ago: executing program 1 (id=9038): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 541.102542ms ago: executing program 0 (id=9039): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 462.333806ms ago: executing program 2 (id=9040): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x1c, r0, 0x801, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 343.063162ms ago: executing program 3 (id=9041): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x0, 0x0, 0x0, 0x0) 170.956959ms ago: executing program 3 (id=9042): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) socket$inet6(0xa, 0x2, 0x0) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 139.543406ms ago: executing program 5 (id=9043): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f0000000880)=""/207, 0xcf}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000001ac0)=""/203, 0xcb}, {&(0x7f0000001bc0)=""/265, 0x109}, {&(0x7f0000000a80)=""/4123, 0x101b}], 0x6}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 77.958358ms ago: executing program 3 (id=9044): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 0s ago: executing program 3 (id=9045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) kernel console output (not intermixed with test programs): 8][T25264] JBD2: Ignoring recovery information on journal [ 766.708022][T25275] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 766.789531][T25275] XFS (loop1): Ending clean mount [ 766.804225][T25275] XFS (loop1): Quotacheck needed: Please wait. [ 766.901722][T25264] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 766.921895][ T1160] tipc: Node number set to 769 [ 766.926776][T25275] XFS (loop1): Quotacheck: Done. [ 766.999857][T14355] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 767.340299][ T5227] ocfs2: Unmounting device (7,2) on (node local) [ 767.715348][T25314] openvswitch: netlink: Actions may not be safe on all matching packets [ 767.920135][T25318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7761'. [ 768.135680][T25328] loop2: detected capacity change from 0 to 64 [ 768.194445][T25331] gretap0: entered promiscuous mode [ 768.245634][T25331] gretap0: left promiscuous mode [ 768.815102][T25317] loop3: detected capacity change from 0 to 32768 [ 768.926475][T25317] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 769.012595][T25347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7772'. [ 769.180415][T18985] ocfs2: Unmounting device (7,3) on (node local) [ 769.440075][T25361] bond0: option mode: unable to set because the bond device has slaves [ 770.752707][T25417] netlink: 'syz.1.7803': attribute type 49 has an invalid length. [ 771.370050][T25440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7813'. [ 771.502280][T25442] loop3: detected capacity change from 0 to 1024 [ 771.578290][T25446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7816'. [ 771.602021][T25442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.818527][T25458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7820'. [ 771.857963][T18985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.145783][T25466] loop5: detected capacity change from 0 to 256 [ 772.555389][T25476] loop3: detected capacity change from 0 to 2048 [ 772.643211][T25476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.881503][T25487] loop1: detected capacity change from 0 to 1024 [ 772.888572][T25460] loop2: detected capacity change from 0 to 32768 [ 772.901776][T25460] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7822 (25460) [ 772.948028][T25487] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 772.960575][T25489] netlink: 'syz.0.7835': attribute type 1 has an invalid length. [ 772.993524][T25489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7835'. [ 773.000399][T25460] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 773.011002][T25487] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 773.079261][T25487] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 773.103683][T25460] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 773.131065][T25460] BTRFS info (device loop2): disk space caching is enabled [ 773.141833][T25487] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.7834: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 773.157618][T25460] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 773.169898][T25495] loop4: detected capacity change from 0 to 2048 [ 773.199861][T25487] EXT4-fs (loop1): no journal found [ 773.221074][T25487] EXT4-fs (loop1): can't get journal size [ 773.227742][T25495] EXT4-fs: Ignoring removed orlov option [ 773.357540][T25495] ext4: Unknown parameter 'seclabel' [ 773.459494][T25493] loop3: detected capacity change from 0 to 32768 [ 773.472532][T25487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 773.524091][T25493] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 773.626248][T25460] BTRFS info (device loop2): rebuilding free space tree [ 773.802614][T25460] BTRFS info (device loop2): disabling free space tree [ 773.814402][T14355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.815958][T25491] loop5: detected capacity change from 0 to 32768 [ 773.835820][T25460] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 773.847502][T25493] XFS (loop3): Ending clean mount [ 773.870416][T25460] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 773.881598][T25493] XFS (loop3): Quotacheck needed: Please wait. [ 774.000317][T25491] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 774.157301][T25493] XFS (loop3): Quotacheck: Done. [ 774.291035][ T5227] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 774.496805][T25491] XFS (loop5): Ending clean mount [ 774.667510][T25533] loop1: detected capacity change from 0 to 32768 [ 774.722522][T16440] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 774.742831][T25533] (syz.1.7842,25533,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.776115][T18985] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 774.820799][T25533] (syz.1.7842,25533,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.951316][T25533] JBD2: Ignoring recovery information on journal [ 775.029972][T25533] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 775.118886][T25554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.593064][T14355] ocfs2: Unmounting device (7,1) on (node local) [ 775.792648][T25579] loop2: detected capacity change from 0 to 512 [ 776.006043][T25579] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 776.074531][T25579] EXT4-fs (loop2): 1 truncate cleaned up [ 776.128948][T25579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.200621][T25567] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 776.201142][T25579] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.7852: Directory hole found for htree leaf block 0 [ 776.452271][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.608441][T25602] netlink: 'syz.1.7859': attribute type 4 has an invalid length. [ 776.616542][T25602] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.7859'. [ 776.701150][ T5345] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 776.999270][ T5345] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 777.013772][T25619] netlink: 'syz.1.7868': attribute type 4 has an invalid length. [ 777.017336][ T5345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.022419][T25619] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7868'. [ 777.039754][T25619] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.7868'. [ 777.105877][ T5345] usb 4-1: config 0 descriptor?? [ 777.173825][T25627] loop5: detected capacity change from 0 to 64 [ 777.219459][T25630] sctp: [Deprecated]: syz.4.7872 (pid 25630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 777.219459][T25630] Use struct sctp_sack_info instead [ 777.292303][ T5345] cp210x 4-1:0.0: cp210x converter detected [ 777.373167][ T5298] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 777.441179][ T1168] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 777.528565][T25638] loop5: detected capacity change from 0 to 512 [ 777.535143][ T5298] usb 2-1: Using ep0 maxpacket: 16 [ 777.555469][ T5298] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.589019][ T5298] usb 2-1: config 0 has no interface number 0 [ 777.596298][T25638] EXT4-fs: Ignoring removed oldalloc option [ 777.609743][ T5298] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.638616][ T1168] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 777.647830][ T1168] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 777.659063][T25638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 777.664303][T25641] loop4: detected capacity change from 0 to 512 [ 777.677592][ T5345] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 777.704263][ T1168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 777.704754][ T5345] usb 4-1: cp210x converter now attached to ttyUSB0 [ 777.729420][ T5298] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.768206][ T1168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 777.779854][ T5298] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 777.801145][T25641] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 777.808510][T25638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 777.809673][T25641] EXT4-fs (loop4): 1 truncate cleaned up [ 777.829039][ T1168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 777.840461][T25638] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.863488][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.872017][T25641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.947794][ T5298] usb 2-1: config 0 descriptor?? [ 777.953604][T16440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 777.987199][ T8] usb 4-1: USB disconnect, device number 54 [ 777.996312][ T1168] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 778.006174][ T1168] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 778.020538][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 778.021422][ T1168] usb 3-1: Product: syz [ 778.040891][ T1168] usb 3-1: Manufacturer: syz [ 778.077941][ T8] cp210x 4-1:0.0: device disconnected [ 778.132698][ T1168] cdc_wdm 3-1:1.0: skipping garbage [ 778.138122][ T1168] cdc_wdm 3-1:1.0: skipping garbage [ 778.147713][ T1168] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 778.154527][ T1168] cdc_wdm 3-1:1.0: Unknown control protocol [ 778.230760][T12143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.302246][ T8] usb 3-1: USB disconnect, device number 54 [ 778.496045][T25655] loop4: detected capacity change from 0 to 2048 [ 778.594938][T25655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.677820][ T5298] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.00A9/input/input74 [ 778.679181][T25655] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 778.708184][T25655] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 778.721532][T25655] EXT4-fs (loop4): This should not happen!! Data will be lost [ 778.721532][T25655] [ 778.733206][T25655] EXT4-fs (loop4): Total free blocks count 0 [ 778.739221][T25655] EXT4-fs (loop4): Free/Dirty block details [ 778.745523][T25655] EXT4-fs (loop4): free_blocks=2415919104 [ 778.771753][T25655] EXT4-fs (loop4): dirty_blocks=32 [ 778.776947][T25655] EXT4-fs (loop4): Block reservation details [ 778.805855][T25655] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 778.856747][T25651] loop5: detected capacity change from 0 to 32768 [ 778.911948][ T5298] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.00A9/input/input75 [ 778.942708][T25651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7881 (25651) [ 778.971725][ T5298] uclogic 0003:28BD:0071.00A9: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 779.010201][T25651] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 779.027014][T25651] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 779.093690][T25651] BTRFS info (device loop5): disk space caching is enabled [ 779.123649][ T1168] usb 2-1: USB disconnect, device number 72 [ 779.138610][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 779.149182][T25651] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 779.418411][T25651] BTRFS info (device loop5): rebuilding free space tree [ 779.616506][T25693] loop4: detected capacity change from 0 to 16 [ 779.645436][T25693] erofs: (device loop4): mounted with root inode @ nid 36. [ 779.678186][T25651] BTRFS info (device loop5): disabling free space tree [ 779.686458][T25651] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 779.732967][T25651] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 779.807958][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 320 @ nid 36 [ 779.831359][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 299 @ nid 36 [ 779.871237][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 298 @ nid 36 [ 779.909568][T25698] loop1: detected capacity change from 0 to 256 [ 779.919755][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 297 @ nid 36 [ 779.930072][T25698] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 779.939705][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 296 @ nid 36 [ 779.981148][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 288 @ nid 36 [ 779.991462][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 280 @ nid 36 [ 780.016926][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 186 @ nid 36 [ 780.071202][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 185 @ nid 36 [ 780.093244][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 184 @ nid 36 [ 780.176872][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 155 @ nid 36 [ 780.194183][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 154 @ nid 36 [ 780.204345][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 153 @ nid 36 [ 780.214124][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 152 @ nid 36 [ 780.231877][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 139 @ nid 36 [ 780.371131][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 138 @ nid 36 [ 780.392209][T25704] loop3: detected capacity change from 0 to 4096 [ 780.420646][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 137 @ nid 36 [ 780.430526][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 136 @ nid 36 [ 780.458383][T25704] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 780.477265][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 128 @ nid 36 [ 780.488886][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 120 @ nid 36 [ 780.509436][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 780.522729][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 81 @ nid 36 [ 780.537689][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 780.555533][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 780.565450][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 780.576591][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 780.586325][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 780.596924][T16440] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 780.616788][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 780.626206][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 780.658142][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 780.672043][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 780.681619][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 780.690796][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 780.712148][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 780.721784][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 780.734112][T25693] erofs: (device loop4): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 780.746694][T25693] bio_check_eod: 33 callbacks suppressed [ 780.746714][T25693] syz.4.7889: attempt to access beyond end of device [ 780.746714][T25693] loop4: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 780.768960][T25693] syz.4.7889: attempt to access beyond end of device [ 780.768960][T25693] loop4: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 780.802415][T25693] syz.4.7889: attempt to access beyond end of device [ 780.802415][T25693] loop4: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 780.824514][T25693] syz.4.7889: attempt to access beyond end of device [ 780.824514][T25693] loop4: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 780.861966][T25693] syz.4.7889: attempt to access beyond end of device [ 780.861966][T25693] loop4: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 780.876968][T25693] syz.4.7889: attempt to access beyond end of device [ 780.876968][T25693] loop4: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 780.891933][T25693] syz.4.7889: attempt to access beyond end of device [ 780.891933][T25693] loop4: rw=524288, sector=525152, nr_sectors = 32 limit=16 [ 780.906796][T25693] syz.4.7889: attempt to access beyond end of device [ 780.906796][T25693] loop4: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 780.948503][T25693] syz.4.7889: attempt to access beyond end of device [ 780.948503][T25693] loop4: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 780.994429][T25693] syz.4.7889: attempt to access beyond end of device [ 780.994429][T25693] loop4: rw=524288, sector=14550774152, nr_sectors = 32 limit=16 [ 781.052145][T25726] loop2: detected capacity change from 0 to 512 [ 781.060597][T25726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 781.351276][T25726] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7903: invalid indirect mapped block 512 (level 0) [ 781.591342][T25726] EXT4-fs (loop2): Remounting filesystem read-only [ 781.599147][T25726] EXT4-fs (loop2): 1 orphan inode deleted [ 781.661185][T25726] EXT4-fs (loop2): 1 truncate cleaned up [ 781.721849][T25737] loop4: detected capacity change from 0 to 40427 [ 781.728827][T25726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.769820][T25722] loop1: detected capacity change from 0 to 32768 [ 781.884528][T25737] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 782.008564][T25737] F2FS-fs (loop4): invalid crc value [ 782.024940][T25726] EXT4-fs: can't change dax mount option while remounting [ 782.139988][T25737] F2FS-fs (loop4): Found nat_bits in checkpoint [ 782.192360][T25722] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 782.287897][T25756] loop3: detected capacity change from 0 to 4096 [ 782.324145][T25756] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 782.352373][T15944] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.372010][T25737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 782.475730][T12143] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 782.548837][T25756] ntfs3(loop3): failed to convert "c46c" to macceltic [ 783.089286][T25722] XFS (loop1): Ending clean mount [ 783.144513][T25722] XFS (loop1): Quotacheck needed: Please wait. [ 783.205912][T21499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 783.239898][ T2900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 783.251619][ T2900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.262343][T21499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 783.266852][T21499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 783.278782][T21499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 783.287882][T21499] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 783.295341][T21499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 783.524215][T25722] XFS (loop1): Quotacheck: Done. [ 783.581567][T25789] loop3: detected capacity change from 0 to 4096 [ 783.618703][T25789] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 783.701363][T14355] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 783.709168][T25789] ntfs3(loop3): Failed to load $Extend (-22). [ 783.722293][T25789] ntfs3(loop3): Failed to initialize $Extend. [ 783.858142][ T2900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 783.889085][ T2900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.552136][ T2900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.598003][ T2900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.708994][T25780] lo speed is unknown, defaulting to 1000 [ 784.856139][T25830] loop3: detected capacity change from 0 to 2048 [ 784.879754][ T2900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.896437][T25830] udf: Unknown parameter 'dont_appraise' [ 784.905402][ T2900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.999199][T25830] loop3: detected capacity change from 0 to 1024 [ 785.026429][T25837] loop5: detected capacity change from 0 to 128 [ 785.066040][T25837] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 785.330699][T16440] sysv_free_block: trying to free block not in datazone [ 785.334264][ T11] hfsplus: b-tree write err: -5, ino 4 [ 785.436267][T16440] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 785.485998][T21499] Bluetooth: hci1: command tx timeout [ 785.545378][ T2900] bridge_slave_1: left allmulticast mode [ 785.561041][ T2900] bridge_slave_1: left promiscuous mode [ 785.569692][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.781926][ T2900] bridge_slave_0: left allmulticast mode [ 785.788431][ T2900] bridge_slave_0: left promiscuous mode [ 785.794958][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.030672][T25862] loop4: detected capacity change from 0 to 4096 [ 786.082507][T25862] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 786.182391][T25849] loop3: detected capacity change from 0 to 40427 [ 786.198936][T25849] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 786.207176][T25849] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 786.299072][T25849] F2FS-fs (loop3): Found nat_bits in checkpoint [ 786.321688][T25862] ntfs3(loop4): failed to convert "c46c" to macceltic [ 786.640099][T25868] loop5: detected capacity change from 0 to 32768 [ 786.738081][T25849] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 786.745462][T25849] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 786.846431][T25864] loop1: detected capacity change from 0 to 32768 [ 786.869162][T25864] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7936 (25864) [ 786.954720][T25868] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 786.969623][T25849] bio_check_eod: 34 callbacks suppressed [ 786.969646][T25849] syz.3.7932: attempt to access beyond end of device [ 786.969646][T25849] loop3: rw=2049, sector=45096, nr_sectors = 544 limit=40427 [ 786.993448][T25864] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 787.032535][T25864] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 787.042432][T25864] BTRFS info (device loop1): using free-space-tree [ 787.265747][T25868] XFS (loop5): Ending clean mount [ 787.404452][T16440] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 787.581786][T21499] Bluetooth: hci1: command tx timeout [ 787.811762][T14355] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 788.602184][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.629105][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.679767][ T2900] bond0 (unregistering): Released all slaves [ 788.956757][ T2900] tipc: Disabling bearer [ 788.991813][ T2900] tipc: Disabling bearer [ 789.015179][ T2900] tipc: Left network mode [ 789.103602][T25915] loop1: detected capacity change from 0 to 32768 [ 789.265802][T25780] chnl_net:caif_netlink_parms(): no params data found [ 789.570141][T25937] loop4: detected capacity change from 0 to 2048 [ 789.643383][T21499] Bluetooth: hci1: command tx timeout [ 789.656764][T25941] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 789.671640][T25939] vivid-001: disconnect [ 789.718125][T25938] vivid-001: reconnect [ 790.034246][T25956] loop4: detected capacity change from 0 to 128 [ 790.073460][T25780] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.082122][T25780] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.092618][T25780] bridge_slave_0: entered allmulticast mode [ 790.121537][T25780] bridge_slave_0: entered promiscuous mode [ 790.383151][T25956] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 790.541353][T25780] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.548531][T25780] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.555182][T12143] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 790.556395][T25780] bridge_slave_1: entered allmulticast mode [ 790.571936][T25780] bridge_slave_1: entered promiscuous mode [ 790.838357][T25780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.191600][T25780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.259066][T25988] loop3: detected capacity change from 0 to 1024 [ 791.554966][T25780] team0: Port device team_slave_0 added [ 791.618703][T25994] loop3: detected capacity change from 0 to 64 [ 791.711353][T21499] Bluetooth: hci1: command tx timeout [ 791.785425][ T2900] hsr_slave_0: left promiscuous mode [ 791.834357][ T2900] hsr_slave_1: left promiscuous mode [ 791.921726][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.964706][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.020906][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.049252][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.165843][T25982] loop4: detected capacity change from 0 to 32768 [ 792.169094][ T2900] veth1_macvtap: left promiscuous mode [ 792.208474][T25982] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 792.236402][ T2900] veth0_macvtap: left promiscuous mode [ 792.533818][T25998] loop1: detected capacity change from 0 to 32768 [ 792.571362][T25998] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7976 (25998) [ 792.600158][T25998] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 792.619889][T25998] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 792.629347][T25998] BTRFS info (device loop1): disk space caching is enabled [ 792.691265][T25998] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 792.820758][T25982] XFS (loop4): Ending clean mount [ 792.960149][T25998] BTRFS info (device loop1): rebuilding free space tree [ 793.024351][T12143] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 793.227708][T25998] BTRFS info (device loop1): disabling free space tree [ 793.239700][T25998] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 793.265026][T25998] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 793.459418][T14355] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 793.791834][T21499] Bluetooth: hci1: command tx timeout [ 793.951426][ T2900] netpci0 (unregistering): Port device virt_wifi0 removed [ 794.094152][T26045] loop5: detected capacity change from 0 to 32768 [ 794.183859][T26045] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 794.221894][T26045] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 794.385548][T26045] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 794.418160][ T5298] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 794.425187][ T5298] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 794.629880][ T5298] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 204ms [ 794.644055][ T5298] gfs2: fsid=syz:syz.0: jid=0: Done [ 794.650367][T26045] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 794.897515][T26056] loop1: detected capacity change from 0 to 32768 [ 794.938577][T26056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7990 (26056) [ 795.267314][T26056] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 795.289566][T26056] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 795.312344][T26056] BTRFS info (device loop1): using free-space-tree [ 795.596733][ T2900] netpci0 (unregistering): Port device team_slave_1 removed [ 795.827311][ T2900] netpci0 (unregistering): Port device team_slave_0 removed [ 795.871464][T14355] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 797.224517][T25780] team0: Port device team_slave_1 added [ 797.239758][T26020] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 797.732202][T26117] loop3: detected capacity change from 0 to 128 [ 797.785965][T26109] loop1: detected capacity change from 0 to 32768 [ 797.807454][T26117] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 797.874561][T26117] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 797.876779][T26106] loop5: detected capacity change from 0 to 4096 [ 797.915982][T26106] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 797.953558][T25780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.961252][T25780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.987584][T25780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.070355][T25780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.082029][T25780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.108408][T25780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.354246][T18985] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.358560][T26106] ntfs3(loop5): failed to convert "c46c" to cp775 [ 798.380263][T26109] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 798.585189][T25780] hsr_slave_0: entered promiscuous mode [ 798.624338][T26147] loop4: detected capacity change from 0 to 1024 [ 798.639848][T25780] hsr_slave_1: entered promiscuous mode [ 798.660839][T26109] XFS (loop1): Ending clean mount [ 798.817147][T25780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.859830][T25780] Cannot create hsr debugfs directory [ 798.882697][T14355] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 799.143039][T26157] program syz.0.8018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 799.389613][ T2900] IPVS: stop unused estimator thread 0... [ 799.721874][T26170] loop4: detected capacity change from 0 to 1024 [ 799.775909][T26170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 800.006046][T26170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.285087][T12143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.798172][T26247] loop3: detected capacity change from 0 to 64 [ 802.034332][T26252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8045'. [ 802.748332][T25780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 802.749029][T26265] loop5: detected capacity change from 0 to 40427 [ 802.825288][T26265] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 802.838755][T26265] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 802.852181][T25780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 802.939172][T26265] F2FS-fs (loop5): Found nat_bits in checkpoint [ 802.951575][T25780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 802.996724][T25780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 803.042103][T26287] tipc: Enabling of bearer rejected, already enabled [ 803.188120][T26265] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 803.213457][T26265] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 803.330269][T25780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.352046][T25780] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.364485][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.371732][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.392762][T26296] openvswitch: netlink: Actions may not be safe on all matching packets [ 803.569643][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.576921][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.945576][T26317] loop4: detected capacity change from 0 to 2048 [ 804.088478][T26317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.211256][T26317] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 804.311132][T26317] EXT4-fs (loop4): Remounting filesystem read-only [ 804.333948][T25780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.397825][T25780] veth0_vlan: entered promiscuous mode [ 804.417473][T26317] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 804.432677][T26339] use of bytesused == 0 is deprecated and will be removed in the future, [ 804.442163][T26339] use the actual size instead. [ 804.495691][T25780] veth1_vlan: entered promiscuous mode [ 804.617250][T25780] veth0_macvtap: entered promiscuous mode [ 804.639889][T12143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.666854][T25780] veth1_macvtap: entered promiscuous mode [ 804.730812][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.756539][T26345] program syz.0.8076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.798613][T26342] loop1: detected capacity change from 0 to 4096 [ 804.820773][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.841265][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.858687][T26342] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 804.861028][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.953589][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.970082][T26342] ntfs3(loop1): failed to convert "c46c" to iso8859-5 [ 805.033060][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.079378][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.130653][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.169273][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.220625][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.286285][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.329306][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.374697][T25780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.425355][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.491666][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.536262][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.586803][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.625390][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.658075][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.687419][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.731730][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.766129][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.800624][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.830124][T25780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.878834][T25780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.915052][T25780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.958080][T26376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8084'. [ 805.992072][T26376] netem: unknown loss type 13 [ 806.006967][T26376] netem: change failed [ 806.046528][T25780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.093527][T25780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.127781][T25780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.183384][T25780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.212258][T26384] loop1: detected capacity change from 0 to 256 [ 806.260709][T26387] loop3: detected capacity change from 0 to 64 [ 806.268362][T26384] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 806.372292][ T29] audit: type=1800 audit(1728894696.957:319): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8086" name=FDDD3B dev="loop1" ino=1049037 res=0 errno=0 [ 806.450671][T26387] hfs: request for non-existent node 1573 in B*Tree [ 806.468634][T26387] hfs: request for non-existent node 1573 in B*Tree [ 806.645478][T23560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.653657][T23560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.744408][ T1284] hfs: request for non-existent node 1573 in B*Tree [ 806.755563][ T1284] hfs: request for non-existent node 1573 in B*Tree [ 806.781610][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.814564][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.951910][T26403] loop5: detected capacity change from 0 to 2048 [ 807.351374][T26419] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 808.121493][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.429710][T26472] bond0: Unable to set down delay as MII monitoring is disabled [ 810.552227][T26512] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.8127'. [ 810.595369][T26465] loop2: detected capacity change from 0 to 32768 [ 810.604068][T26512] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 810.632050][T26465] XFS: noikeep mount option is deprecated. [ 810.726424][T26465] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 810.880413][T26465] XFS (loop2): Ending clean mount [ 810.888172][T26465] XFS (loop2): Quotacheck needed: Please wait. [ 810.911153][ T5239] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 811.030035][T26465] XFS (loop2): Quotacheck: Done. [ 811.062267][T26465] XFS (loop2): User initiated shutdown received. [ 811.069132][T26465] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 811.086571][T26465] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 811.097000][ T5239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.107445][ T5239] usb 4-1: config 0 has no interfaces? [ 811.113100][ T5239] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 811.124094][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.144912][ T5239] usb 4-1: config 0 descriptor?? [ 811.203322][T25780] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 811.511450][T26538] fuse: Bad value for 'fd' [ 811.586110][ T5345] usb 4-1: USB disconnect, device number 55 [ 812.027033][T26528] loop4: detected capacity change from 0 to 32768 [ 812.061717][T26554] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8141'. [ 812.070854][T26528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8130 (26528) [ 812.084037][T26554] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8141'. [ 812.301141][T26528] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 812.312555][T26528] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 812.367222][T26528] BTRFS info (device loop4): using free-space-tree [ 812.804329][T26582] loop1: detected capacity change from 0 to 164 [ 812.877019][T26582] Unable to read rock-ridge attributes [ 812.886308][T12143] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 812.961900][T26582] Unable to read rock-ridge attributes [ 812.974684][T26580] loop5: detected capacity change from 0 to 4096 [ 814.231522][T26584] loop3: detected capacity change from 0 to 40427 [ 814.255783][ T29] audit: type=1326 audit(1728894704.837:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26617 comm="syz.5.8163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fbb77dff9 code=0x0 [ 814.294179][T26584] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 814.326524][T26584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 814.432018][T26584] F2FS-fs (loop3): Found nat_bits in checkpoint [ 814.632412][T26584] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 814.639578][T26584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 814.651393][ T5345] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 814.844612][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.898957][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.928262][ T5345] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 815.031342][ T5345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.114472][ T5345] usb 3-1: config 0 descriptor?? [ 815.283748][T26654] netlink: 4072 bytes leftover after parsing attributes in process `syz.5.8176'. [ 815.307554][T26654] openvswitch: netlink: Actions may not be safe on all matching packets [ 815.545750][ T5345] wacom 0003:056A:0028.00AA: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 815.562496][ T5345] wacom 0003:056A:0028.00AA: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.2-1/input0 [ 815.590564][ T5345] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.00AA/input/input76 [ 815.769215][ T5345] usb 3-1: USB disconnect, device number 55 [ 816.576080][T26665] loop4: detected capacity change from 0 to 32768 [ 816.851136][T26665] read_mapping_page failed! [ 816.856552][T26665] ERROR: (device loop4): txCommit: [ 816.856552][T26665] [ 817.061240][ T5349] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 817.234814][ T5349] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.265491][ T5349] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 817.293793][ T5349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.294755][T26683] loop2: detected capacity change from 0 to 40427 [ 817.326692][T26683] F2FS-fs (loop2): invalid crc value [ 817.340574][T26683] F2FS-fs (loop2): Found nat_bits in checkpoint [ 817.360593][ T5349] usb 2-1: config 0 descriptor?? [ 817.509425][T26683] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 817.596197][ T5349] usb 2-1: USB disconnect, device number 73 [ 817.620527][T25780] syz-executor: attempt to access beyond end of device [ 817.620527][T25780] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 817.652809][T25780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 818.081189][T26701] loop4: detected capacity change from 0 to 4096 [ 818.312447][T26701] ntfs3(loop4): failed to convert "0000" to iso8859-3 [ 818.344701][T26701] ntfs3(loop4): failed to convert "0000" to iso8859-3 [ 819.242562][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8204'. [ 819.297891][T26707] loop3: detected capacity change from 0 to 32768 [ 819.494142][T26707] find_entry called with index >= next_index [ 819.500222][T26707] find_entry called with index >= next_index [ 819.540572][T26707] find_entry called with index >= next_index [ 819.559095][T26733] jfs: Unrecognized mount option "ÿÿ00000000000000000000004¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 819.596767][T26731] netlink: 'syz.4.8208': attribute type 1 has an invalid length. [ 819.687564][T26735] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 820.071493][T26741] bond1: entered promiscuous mode [ 820.090056][T26741] bond1: entered allmulticast mode [ 820.121665][T26741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 820.251801][T26756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8219'. [ 820.431661][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8221'. [ 821.022998][T26775] loop4: detected capacity change from 0 to 4096 [ 821.030756][T26775] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 821.055676][T26775] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 821.211330][T26778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8229'. [ 821.439930][T26763] loop2: detected capacity change from 0 to 32768 [ 821.555534][T26763] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 821.802276][T26763] XFS (loop2): Ending clean mount [ 821.914359][T25780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 822.141079][ T5239] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 822.331537][ T5239] usb 4-1: Using ep0 maxpacket: 16 [ 822.364978][ T5239] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 822.413382][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 822.465430][ T5239] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 822.485285][ T5239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.505117][ T5239] usb 4-1: Product: syz [ 822.509535][ T5239] usb 4-1: Manufacturer: syz [ 822.529309][ T5239] usb 4-1: SerialNumber: syz [ 822.552454][ T5239] usb 4-1: config 0 descriptor?? [ 822.589254][ T5239] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 822.622776][ T5239] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 822.772537][T26806] loop5: detected capacity change from 0 to 32768 [ 822.802694][T26806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8239 (26806) [ 822.876211][T26806] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 822.907468][T26806] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 822.936097][T26806] BTRFS info (device loop5): using free-space-tree [ 823.219105][ T5239] em28xx 4-1:0.0: chip ID is em2750 [ 823.291172][T26850] loop1: detected capacity change from 0 to 1024 [ 823.426051][ T5239] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 823.450128][T16440] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 823.461953][ T5239] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 823.479734][ T5239] em28xx 4-1:0.0: No AC97 audio processor [ 823.542072][ T5239] usb 4-1: USB disconnect, device number 56 [ 823.591417][ T5239] em28xx 4-1:0.0: Disconnecting em28xx [ 823.678188][ T5239] em28xx 4-1:0.0: Freeing device [ 823.719134][T26859] loop4: detected capacity change from 0 to 512 [ 823.780465][T26859] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8255: corrupted in-inode xattr: invalid ea_ino [ 823.844360][T26859] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8255: couldn't read orphan inode 15 (err -117) [ 823.943422][T26859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.202553][T12143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.621110][T26883] ALSA: mixer_oss: invalid OSS volume '' [ 824.725954][T26862] loop1: detected capacity change from 0 to 32768 [ 824.796809][T26862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8254 (26862) [ 824.931346][T26862] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 824.998011][T26862] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 825.028302][T26862] BTRFS info (device loop1): using free-space-tree [ 825.053122][T26899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8273'. [ 825.491139][ T8] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 825.611334][T14355] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 825.861233][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 825.901275][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.912544][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.922441][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 825.932532][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.944904][ T8] usb 4-1: config 0 descriptor?? [ 825.979078][T26939] netlink: 'syz.4.8284': attribute type 6 has an invalid length. [ 826.400049][ T8] playstation 0003:054C:0CE6.00AB: unknown main item tag 0x0 [ 826.411197][ T8] playstation 0003:054C:0CE6.00AB: unknown main item tag 0x0 [ 826.439891][ T8] playstation 0003:054C:0CE6.00AB: unknown main item tag 0x0 [ 826.475740][ T8] playstation 0003:054C:0CE6.00AB: unknown main item tag 0x0 [ 826.489393][ T8] playstation 0003:054C:0CE6.00AB: unknown main item tag 0x0 [ 826.497167][ T8] playstation 0003:054C:0CE6.00AB: unknown main item tag 0x0 [ 826.504852][ T8] playstation 0003:054C:0CE6.00AB: unknown main item tag 0x0 [ 826.811861][T26949] loop4: detected capacity change from 0 to 32768 [ 826.824667][ T8] playstation 0003:054C:0CE6.00AB: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 826.853352][T26949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8288 (26949) [ 826.884195][T26949] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 826.894937][T26949] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 826.903958][ T8] playstation 0003:054C:0CE6.00AB: Invalid byte count transferred, expected 20 got 0 [ 826.915295][ T8] playstation 0003:054C:0CE6.00AB: Failed to retrieve DualSense pairing info: -22 [ 826.925766][ T8] playstation 0003:054C:0CE6.00AB: Failed to get MAC address from DualSense [ 826.937135][T26949] BTRFS info (device loop4): using free-space-tree [ 826.944680][ T8] playstation 0003:054C:0CE6.00AB: Failed to create dualsense. [ 826.977055][ T8] playstation 0003:054C:0CE6.00AB: probe with driver playstation failed with error -22 [ 827.127269][ T5239] usb 4-1: USB disconnect, device number 57 [ 827.501836][T26947] loop1: detected capacity change from 0 to 32768 [ 827.519929][T26947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8281 (26947) [ 827.601381][T26947] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 827.613625][T26947] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 827.622413][T26947] BTRFS info (device loop1): using free-space-tree [ 827.866488][T12143] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.997525][T14355] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 828.140521][T26975] loop5: detected capacity change from 0 to 32768 [ 828.208559][T27000] loop2: detected capacity change from 0 to 16 [ 828.237682][T27000] erofs: (device loop2): mounted with root inode @ nid 36. [ 828.314059][ T29] audit: type=1800 audit(1728894718.847:321): pid=27000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8297" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 829.073500][T27021] loop3: detected capacity change from 0 to 64 [ 829.170545][T27021] syz.3.8306: attempt to access beyond end of device [ 829.170545][T27021] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 829.914056][T27045] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 830.210472][T27051] netlink: 'syz.3.8319': attribute type 39 has an invalid length. [ 830.387147][T27032] loop2: detected capacity change from 0 to 32768 [ 830.402028][T27032] XFS: ikeep mount option is deprecated. [ 830.461247][T27032] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 830.718215][T27032] XFS (loop2): Ending clean mount [ 830.735040][T27032] XFS (loop2): Quotacheck needed: Please wait. [ 830.863068][T27032] XFS (loop2): Quotacheck: Done. [ 831.154400][T27078] loop3: detected capacity change from 0 to 2048 [ 831.199582][T27078] Alternate GPT is invalid, using primary GPT. [ 831.201736][T27080] batadv0: entered promiscuous mode [ 831.212499][T27080] macsec1: entered promiscuous mode [ 831.217905][T27080] macsec1: entered allmulticast mode [ 831.224097][T27078] loop3: p1 p2 p3 [ 831.239332][T27080] batadv0: entered allmulticast mode [ 831.250893][T25780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 831.544963][ T5507] udevd[5507]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 831.565622][ T8248] udevd[8248]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 831.589842][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 831.732090][T27086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8330'. [ 831.954197][T27096] netlink: 'syz.2.8333': attribute type 21 has an invalid length. [ 831.979717][T27096] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8333'. [ 832.008030][T27096] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8333'. [ 832.140866][T27098] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.162893][T27098] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.463736][T27102] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8335'. [ 832.481232][T27102] 0·: renamed from hsr_slave_1 (while UP) [ 832.506426][T27102] 0·: entered allmulticast mode [ 832.538068][T27102] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 833.181787][T27133] loop5: detected capacity change from 0 to 64 [ 833.386236][T27137] sg_write: process 2232 (syz.0.8352) changed security contexts after opening file descriptor, this is not allowed. [ 833.438145][T27138] program syz.0.8352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.488106][T27108] loop4: detected capacity change from 0 to 32768 [ 833.523678][T27108] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8339 (27108) [ 833.567197][T27108] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 833.644265][T27108] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 833.656198][T27108] BTRFS info (device loop4): using free-space-tree [ 833.888748][T27118] loop2: detected capacity change from 0 to 32768 [ 833.955609][T12143] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 834.260376][T27118] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 834.311193][T27118] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 834.335243][T27172] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.353338][T27172] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.466033][T27118] XFS (loop2): Ending clean mount [ 834.474145][T27118] XFS (loop2): Quotacheck needed: Please wait. [ 834.687977][T27179] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8358'. [ 834.754503][T27118] XFS (loop2): Quotacheck: Done. [ 834.781213][T27179] 0·: renamed from hsr_slave_1 (while UP) [ 834.972505][T27179] 0·: entered allmulticast mode [ 834.977801][T27179] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 835.147068][T27162] loop3: detected capacity change from 0 to 40427 [ 835.160324][T27189] loop4: detected capacity change from 0 to 64 [ 835.166866][T27187] loop1: detected capacity change from 0 to 16 [ 835.188614][T25780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 835.200871][T27187] erofs: (device loop1): mounted with root inode @ nid 36. [ 835.241632][T27162] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 835.263651][T27162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 835.349842][T27162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 835.603852][T27162] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 835.611516][T27162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 835.913073][ T29] audit: type=1326 audit(1728894726.487:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 835.963731][ T29] audit: type=1326 audit(1728894726.487:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 835.996593][T27209] loop1: detected capacity change from 0 to 4096 [ 836.031220][ T29] audit: type=1326 audit(1728894726.517:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.055995][ T29] audit: type=1326 audit(1728894726.517:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.079065][ T29] audit: type=1326 audit(1728894726.517:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.103520][ T29] audit: type=1326 audit(1728894726.537:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.108173][T27209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.126496][ T29] audit: type=1326 audit(1728894726.547:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.163266][ T29] audit: type=1326 audit(1728894726.547:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.214533][ T29] audit: type=1326 audit(1728894726.547:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.306140][T27209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 836.313165][ T29] audit: type=1326 audit(1728894726.547:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27211 comm="syz.0.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x7ffc0000 [ 836.371302][T27209] EXT4-fs: Cannot specify journal on remount [ 836.435996][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8380'. [ 836.794661][T14355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.004013][T27233] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.8385'. [ 837.042381][T27236] loop1: detected capacity change from 0 to 64 [ 837.063028][T27238] loop2: detected capacity change from 0 to 256 [ 837.272541][T27245] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8388'. [ 837.737795][T27261] loop5: detected capacity change from 0 to 256 [ 837.862188][T27263] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8396'. [ 838.306694][T27280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 838.439459][T27285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8405'. [ 838.451709][T27285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8405'. [ 838.549045][T27292] loop2: detected capacity change from 0 to 736 [ 838.761496][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.767264][T27296] loop1: detected capacity change from 0 to 2048 [ 838.832689][T27302] loop3: detected capacity change from 0 to 8 [ 838.841244][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.871873][T27303] loop5: detected capacity change from 0 to 1024 [ 838.897742][T27303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 838.904304][T27306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 838.925000][T27302] SQUASHFS error: Failed to read block 0x260685: -5 [ 838.925505][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.931875][T27302] SQUASHFS error: Unable to read metadata cache entry [260685] [ 838.947080][T27302] SQUASHFS error: Unable to read directory block [260685:0] [ 839.091572][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.100092][T27296] Alternate GPT is invalid, using primary GPT. [ 839.122518][T27296] loop1: p1 p2 p3 [ 839.128184][T27303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.132451][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.171343][T27303] EXT4-fs error (device loop5): __ext4_new_inode:1070: comm syz.5.8414: reserved inode found cleared - inode=18 [ 839.271042][ T4679] Alternate GPT is invalid, using primary GPT. [ 839.277857][ T4679] loop1: p1 p2 p3 [ 839.355389][ T5507] udevd[5507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 839.421188][ T5298] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.476916][ T5507] udevd[5507]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 839.481616][T16440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.496085][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 839.534670][ T5345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.574321][ T5292] udevd[5292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 839.605911][ T8248] udevd[8248]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 839.618584][ T5507] udevd[5507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 839.641820][ T5298] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.655407][T27331] loop3: detected capacity change from 0 to 128 [ 839.713171][T27335] loop5: detected capacity change from 0 to 256 [ 839.716216][T27331] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 839.808641][T27331] ext4 filesystem being mounted at /492/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 839.833913][T27331] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 839.868759][T27335] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 839.949006][T18985] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 840.511840][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.652494][T27322] loop1: detected capacity change from 0 to 32768 [ 840.659663][T27322] XFS: ikeep mount option is deprecated. [ 840.741412][T27356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8437'. [ 840.791528][T27322] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 840.824689][T27330] loop4: detected capacity change from 0 to 32768 [ 840.857416][T27330] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 841.033076][T27322] XFS (loop1): Ending clean mount [ 841.083626][T27322] XFS (loop1): Quotacheck needed: Please wait. [ 841.176167][T27322] XFS (loop1): Quotacheck: Done. [ 841.201152][ T1168] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 841.292541][T27330] XFS (loop4): Ending clean mount [ 841.401173][ T1168] usb 4-1: Using ep0 maxpacket: 16 [ 841.422735][ T1168] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.441296][ T1168] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 841.442063][T14355] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 841.451402][ T1168] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 841.451441][ T1168] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 841.451470][ T1168] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 841.453647][ T1168] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.470149][T12143] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 841.483040][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.517391][ T1168] usb 4-1: Product: syz [ 841.522222][ T1168] usb 4-1: Manufacturer: syz [ 841.527045][ T1168] usb 4-1: SerialNumber: syz [ 841.746762][ T1168] cdc_ncm 4-1:1.0: bind() failure [ 841.760086][ T1168] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 841.767533][T27386] team_slave_0: entered promiscuous mode [ 841.774054][T27386] team_slave_1: entered promiscuous mode [ 841.796071][ T1168] cdc_ncm 4-1:1.1: bind() failure [ 841.810429][ T1168] usb 4-1: USB disconnect, device number 58 [ 842.210507][T27378] loop2: detected capacity change from 0 to 32768 [ 842.227379][T27378] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8440 (27378) [ 842.227718][T27396] input: syz0 as /devices/virtual/input/input79 [ 842.378870][T27378] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 842.417927][T27378] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 842.479337][T27378] BTRFS info (device loop2): using free-space-tree [ 842.509372][T27404] loop3: detected capacity change from 0 to 256 [ 842.679571][T27404] FAT-fs (loop3): Directory bread(block 64) failed [ 842.689114][T27404] FAT-fs (loop3): Directory bread(block 65) failed [ 842.711091][T27404] FAT-fs (loop3): Directory bread(block 66) failed [ 842.717672][T27404] FAT-fs (loop3): Directory bread(block 67) failed [ 842.726238][T27417] loop4: detected capacity change from 0 to 16 [ 842.733268][T27404] FAT-fs (loop3): Directory bread(block 68) failed [ 842.741686][T27404] FAT-fs (loop3): Directory bread(block 69) failed [ 842.748936][T27404] FAT-fs (loop3): Directory bread(block 70) failed [ 842.756050][T27404] FAT-fs (loop3): Directory bread(block 71) failed [ 842.763091][T27404] FAT-fs (loop3): Directory bread(block 72) failed [ 842.771287][T27404] FAT-fs (loop3): Directory bread(block 73) failed [ 842.794788][T27417] erofs: (device loop4): mounted with root inode @ nid 36. [ 842.976972][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 842.976995][ T29] audit: type=1800 audit(1728894733.557:333): pid=27378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8440" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 843.015891][T27378] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 843.308115][T25780] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 843.433601][T27433] loop3: detected capacity change from 0 to 128 [ 844.512076][T27463] netlink: 'syz.5.8473': attribute type 1 has an invalid length. [ 844.691728][T27464] loop2: detected capacity change from 0 to 4096 [ 844.707368][T27464] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 844.718326][T27464] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 844.819279][T27476] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 844.832609][ T5813] udevd[5813]: incorrect nilfs2 checksum on /dev/loop2 [ 845.914851][T27497] loop4: detected capacity change from 0 to 1024 [ 846.056984][T27497] hfsplus: invalid extended attribute record [ 846.281949][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8495'. [ 846.333552][T13658] hfsplus: b-tree write err: -5, ino 8 [ 846.884188][T27523] netlink: 'syz.2.8500': attribute type 1 has an invalid length. [ 846.892164][T27523] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8500'. [ 846.901289][T27523] openvswitch: netlink: Actions may not be safe on all matching packets [ 846.964617][T27519] loop1: detected capacity change from 0 to 32768 [ 847.028158][T27529] loop2: detected capacity change from 0 to 1024 [ 847.088812][T27529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.505192][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8508'. [ 847.738381][T27549] netlink: 'syz.2.8512': attribute type 1 has an invalid length. [ 847.756613][T27549] netlink: 'syz.2.8512': attribute type 2 has an invalid length. [ 847.776374][T27549] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 848.063850][T27562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8517'. [ 848.160325][T27568] loop1: detected capacity change from 0 to 128 [ 848.419183][T27577] netlink: 'syz.0.8524': attribute type 6 has an invalid length. [ 849.141552][ T8] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 849.302102][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 849.323713][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 849.354625][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.407446][ T8] usb 3-1: config 0 descriptor?? [ 849.426817][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 849.962819][T27623] loop5: detected capacity change from 0 to 164 [ 850.237890][ T8] gspca_sunplus: reg_w_riv err -71 [ 850.243992][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 850.267962][ T8] usb 3-1: USB disconnect, device number 56 [ 850.453374][T27642] loop4: detected capacity change from 0 to 512 [ 850.511945][T27642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 850.557031][T27642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.572356][T27642] ext4 filesystem being mounted at /875/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.701734][T12143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.037083][T27667] loop4: detected capacity change from 0 to 2048 [ 851.127632][T27667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.171365][T27667] EXT4-fs (loop4): shut down requested (2) [ 851.321295][T12143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.629255][ T29] audit: type=1326 audit(1728894742.207:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27688 comm="syz.2.8572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb1db7dff9 code=0x0 [ 852.069024][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8578'. [ 852.104237][ T29] audit: type=1326 audit(1728894742.687:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.175279][ T29] audit: type=1326 audit(1728894742.687:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.255010][ T29] audit: type=1326 audit(1728894742.717:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.278645][ T29] audit: type=1326 audit(1728894742.717:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.349753][ T29] audit: type=1326 audit(1728894742.717:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.414347][ T29] audit: type=1326 audit(1728894742.717:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.458648][T27721] loop1: detected capacity change from 0 to 128 [ 852.472005][T27721] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 852.500288][ T29] audit: type=1326 audit(1728894742.727:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.679945][ T29] audit: type=1326 audit(1728894742.727:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.706572][T27721] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 852.779458][ T29] audit: type=1326 audit(1728894742.727:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47f7dff9 code=0x7ffc0000 [ 852.819887][T27732] loop2: detected capacity change from 0 to 512 [ 852.844454][T27732] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 852.961033][T27732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 852.969084][T27732] System zones: 1-12 [ 852.974097][T27732] EXT4-fs (loop2): 1 truncate cleaned up [ 852.980897][T27732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.115814][T27738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8594'. [ 853.170543][T25780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.212305][T27740] vxcan3: entered promiscuous mode [ 853.217483][T27740] vxcan3: entered allmulticast mode [ 853.282569][T27727] loop3: detected capacity change from 0 to 32768 [ 853.480325][T27729] loop4: detected capacity change from 0 to 32768 [ 853.543957][T27729] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 853.729632][T27729] XFS (loop4): Ending clean mount [ 853.754607][T27729] XFS (loop4): Quotacheck needed: Please wait. [ 853.899714][T27729] XFS (loop4): Quotacheck: Done. [ 854.002184][T27758] program syz.5.8601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 854.056067][T12143] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 854.590197][T27773] loop5: detected capacity change from 0 to 1024 [ 854.623427][T27774] netlink: 'syz.3.8609': attribute type 1 has an invalid length. [ 854.649387][T27773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.656196][T27774] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.8609'. [ 854.735116][T27774] netlink: 'syz.3.8609': attribute type 1 has an invalid length. [ 854.769227][T27755] loop1: detected capacity change from 0 to 32768 [ 854.883683][T27779] loop4: detected capacity change from 0 to 4096 [ 854.900334][T16440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.040479][T27787] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8612'. [ 855.133342][T27755] JBD2: Ignoring recovery information on journal [ 855.190106][T27755] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 855.396806][T14355] ocfs2: Unmounting device (7,1) on (node local) [ 856.174201][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.183544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.239430][T27784] loop3: detected capacity change from 0 to 32768 [ 856.394247][T27816] loop1: detected capacity change from 0 to 32768 [ 856.678261][T27784] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 856.862106][T27784] XFS (loop3): Ending clean mount [ 856.918440][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 856.918462][ T29] audit: type=1800 audit(1728894747.487:354): pid=27784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8613" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 857.142090][T18985] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 857.251823][T13658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.617075][T27841] loop4: detected capacity change from 0 to 4096 [ 857.625480][T27841] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 857.851311][ T5298] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 858.006836][T27852] program syz.1.8640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.022022][ T5298] usb 4-1: Using ep0 maxpacket: 8 [ 858.047879][ T5298] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 858.060994][ T5298] usb 4-1: config 179 has no interface number 0 [ 858.081115][ T5298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 858.113948][ T5298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 858.158460][ T5298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 858.181895][ T5298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 858.257225][ T5298] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 858.268099][T27859] tipc: Enabling of bearer rejected, failed to enable media [ 858.315520][ T5298] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 858.341009][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.365323][T27846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 858.633878][ T5298] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input80 [ 858.703852][T27838] loop2: detected capacity change from 0 to 40427 [ 858.771303][T27838] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 858.836671][ T5298] usb 4-1: USB disconnect, device number 59 [ 858.836753][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 858.836799][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 858.838154][T27838] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 858.856308][ T5298] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 858.941335][T27838] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1fffff [ 858.956521][T27838] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 859.023357][T27838] F2FS-fs (loop2): invalid crc value [ 859.067486][T27838] F2FS-fs (loop2): Found nat_bits in checkpoint [ 859.152937][T27885] loop1: detected capacity change from 0 to 512 [ 859.194577][T27885] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 859.267278][T27885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.288709][T27885] ext4 filesystem being mounted at /895/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.309285][T27838] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 859.327454][ T1284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.336252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.401089][T27838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 859.475560][T27897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 859.512455][T27896] rtc_cmos 00:00: Alarms can be up to one day in the future [ 859.516538][T27838] syz.2.8633: attempt to access beyond end of device [ 859.516538][T27838] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 859.543300][T14355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.593096][T27838] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 860.062433][ T5298] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 860.255372][ T5298] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 860.274485][ T5298] usb 2-1: config 246 has no interface number 0 [ 860.301082][ T5298] usb 2-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 860.333818][ T5298] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 860.361808][ T5298] usb 2-1: config 246 interface 166 has no altsetting 0 [ 860.373384][ T5298] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 860.387772][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 860.391452][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.409245][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 860.411178][ T5298] usb 2-1: Product: syz [ 860.424539][ T5298] usb 2-1: Manufacturer: syz [ 860.433054][ T5298] usb 2-1: SerialNumber: syz [ 860.451252][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 860.468941][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 860.511225][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 860.866796][T27909] loop3: detected capacity change from 0 to 40427 [ 860.889436][T27909] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 860.907964][T27926] netlink: 'syz.2.8670': attribute type 3 has an invalid length. [ 860.917049][T27909] F2FS-fs (loop3): invalid crc value [ 860.941386][T27926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8670'. [ 860.954648][T27909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 861.054243][T27909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 861.105512][ T5298] usb 2-1: Limiting number of CPorts to U8_MAX [ 861.136651][ T5298] usb 2-1: Unknown endpoint type found, address 0x0b [ 861.170005][ T5298] usb 2-1: Not enough endpoints found in device, aborting! [ 861.305199][T13658] kworker/u8:4: attempt to access beyond end of device [ 861.305199][T13658] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 861.333987][T13658] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 861.352332][T13658] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 861.378727][ T1168] usb 2-1: USB disconnect, device number 74 [ 861.391771][ T4616] Bluetooth: hci5: command 0x0405 tx timeout [ 862.098069][T27949] loop1: detected capacity change from 0 to 128 [ 862.161504][ T29] audit: type=1804 audit(1728894752.737:355): pid=27949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8679" name="/newroot/898/file0/file0" dev="loop1" ino=1049071 res=1 errno=0 [ 862.183703][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.425253][T27955] loop4: detected capacity change from 0 to 2048 [ 862.511660][ T2900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.556159][T27955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 862.618972][T27955] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 862.688796][T27941] loop2: detected capacity change from 0 to 40427 [ 862.811069][T27941] F2FS-fs (loop2): invalid crc value [ 862.874746][T27963] loop5: detected capacity change from 0 to 1024 [ 862.931097][T27941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 862.939872][T27963] EXT4-fs: Ignoring removed orlov option [ 863.020597][T27941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 863.052424][T27963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.135449][T27941] syz.2.8676: attempt to access beyond end of device [ 863.135449][T27941] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 863.310058][T16440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.311612][T27941] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 864.112191][T27961] loop1: detected capacity change from 0 to 40427 [ 864.164786][T27961] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 864.208894][T27961] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 864.352296][T27961] F2FS-fs (loop1): Found nat_bits in checkpoint [ 864.526330][T27977] loop3: detected capacity change from 0 to 32768 [ 864.552717][T28003] loop5: detected capacity change from 0 to 2048 [ 864.590529][T28003] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 864.615375][T27977] find_entry called with index >= next_index [ 864.651325][T28003] syz.5.8700: attempt to access beyond end of device [ 864.651325][T28003] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 864.651399][T28006] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 864.676066][ T29] audit: type=1326 audit(1728894755.257:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28007 comm="syz.0.8703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43cb17dff9 code=0x0 [ 864.719363][T27961] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 864.728419][T27961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 864.771130][ T29] audit: type=1804 audit(1728894755.297:357): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8688" name="/newroot/537/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 864.837116][T28013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8702'. [ 865.072507][T13658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.080889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.426449][T28029] netlink: 'syz.2.8711': attribute type 1 has an invalid length. [ 865.627113][T28031] loop5: detected capacity change from 0 to 1024 [ 865.651467][T28031] EXT4-fs: quotafile must be on filesystem root [ 865.950895][T28044] netlink: 'syz.3.8719': attribute type 1 has an invalid length. [ 866.112006][T28049] loop2: detected capacity change from 0 to 128 [ 866.183147][T28049] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 866.201155][ T29] audit: type=1326 audit(1728894756.767:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.3.8722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b1f17dff9 code=0x0 [ 866.301284][T28049] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 866.459663][T28049] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 866.546629][T25780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 866.686662][T28064] loop2: detected capacity change from 0 to 128 [ 866.992422][ T2900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.000754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.156748][T28038] loop4: detected capacity change from 0 to 32768 [ 867.166813][T28069] loop2: detected capacity change from 0 to 2048 [ 867.217386][T28069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.357397][ T29] audit: type=1800 audit(1728894757.927:359): pid=28069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8728" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 867.769939][T25780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.856840][T28086] loop1: detected capacity change from 0 to 2048 [ 867.914583][T28086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 868.282468][ T2900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.781681][T28115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8746'. [ 868.895349][T28112] loop3: detected capacity change from 0 to 4096 [ 868.969504][T28122] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 869.397170][T28133] loop3: detected capacity change from 0 to 64 [ 869.415844][T28133] hfs: get root inode failed [ 869.555753][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.908025][T28141] loop1: detected capacity change from 0 to 4096 [ 869.951294][T28141] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 870.571647][T28141] overlayfs: invalid redirect ((null)) [ 870.665311][T28121] loop2: detected capacity change from 0 to 32768 [ 870.831780][T28161] loop4: detected capacity change from 0 to 1764 [ 870.844008][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.852484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.933608][T28121] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8752 (28121) [ 871.050401][T28121] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 871.069683][T28121] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 871.114916][T28121] BTRFS info (device loop2): using free-space-tree [ 871.226870][T28133] loop3: detected capacity change from 0 to 40427 [ 871.367950][T28133] F2FS-fs (loop3): invalid crc value [ 871.380004][T28184] netlink: 'syz.1.8772': attribute type 3 has an invalid length. [ 871.390781][T28184] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8772'. [ 871.450258][T28133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 871.601778][T25780] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 871.796482][T28133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 871.932193][T28158] loop5: detected capacity change from 0 to 32768 [ 871.941938][T28158] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8768 (28158) [ 871.977539][T28158] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 871.988287][T28158] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 871.997433][T28158] BTRFS info (device loop5): disk space caching is enabled [ 872.005238][T28158] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 872.020619][T18985] syz-executor: attempt to access beyond end of device [ 872.020619][T18985] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 872.034997][T18985] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 872.509734][T28158] BTRFS info (device loop5): rebuilding free space tree [ 872.625553][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8774'. [ 872.681323][T28158] BTRFS info (device loop5): disabling free space tree [ 872.688502][T28158] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 872.731196][T28158] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 872.766473][ T2900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.775033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.948925][T28220] loop2: detected capacity change from 0 to 1024 [ 873.085190][T28220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.206103][T16440] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 873.391552][T28229] loop3: detected capacity change from 0 to 32768 [ 873.491674][T28229] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 873.540812][T28212] loop1: detected capacity change from 0 to 32768 [ 873.708244][T25780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.834183][T18985] ocfs2: Unmounting device (7,3) on (node local) [ 873.977919][T28238] loop5: detected capacity change from 0 to 128 [ 874.039004][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.702483][T28238] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 874.858178][T28238] ext4 filesystem being mounted at /652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 874.901487][T28246] loop1: detected capacity change from 0 to 40427 [ 874.940770][T28246] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 874.947562][T28246] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 875.021725][T28264] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 875.127162][T28269] bond_slave_0: entered promiscuous mode [ 875.133804][T28269] bond_slave_1: entered promiscuous mode [ 875.181249][T28246] F2FS-fs (loop1): Found nat_bits in checkpoint [ 875.241450][T28269] bond_slave_0: left promiscuous mode [ 875.247802][T28269] bond_slave_1: left promiscuous mode [ 875.321043][T16440] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 875.462590][T28246] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 875.469706][T28246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 875.498009][ T5813] udevd[5813]: failed to send result of seq 30576 to main daemon: Connection refused [ 875.737293][ T29] audit: type=1800 audit(1728894766.317:360): pid=28246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8786" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 875.743816][ T5813] printk: udevd: 26 output lines suppressed due to ratelimiting [ 875.851549][T28246] syz.1.8786: attempt to access beyond end of device [ 875.851549][T28246] loop1: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 875.986670][T28246] syz.1.8786: attempt to access beyond end of device [ 875.986670][T28246] loop1: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 876.050230][T28296] loop4: detected capacity change from 0 to 512 [ 876.063618][T28296] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 876.069814][T28294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.071561][T28296] UDF-fs: Scanning with blocksize 512 failed [ 876.091389][T28246] syz.1.8786: attempt to access beyond end of device [ 876.091389][T28246] loop1: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 876.106961][T28296] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 876.115952][T28296] UDF-fs: Scanning with blocksize 1024 failed [ 876.133578][T28296] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 876.141307][T28296] UDF-fs: Scanning with blocksize 2048 failed [ 876.142021][T28291] syz.1.8786: attempt to access beyond end of device [ 876.142021][T28291] loop1: rw=2049, sector=53336, nr_sectors = 8 limit=40427 [ 876.171949][T28296] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 876.196787][T28301] loop5: detected capacity change from 0 to 24 [ 876.214463][T28296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.358866][ T29] audit: type=1800 audit(1728894766.937:361): pid=28296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8808" name="file1" dev="loop4" ino=26 res=0 errno=0 [ 876.384578][T14355] syz-executor: attempt to access beyond end of device [ 876.384578][T14355] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 876.449262][T14355] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 876.591751][T13658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.600121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.787104][T28318] netlink: 'syz.5.8818': attribute type 1 has an invalid length. [ 876.800637][T28318] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8818'. [ 877.049305][T28324] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 877.283503][T28303] loop3: detected capacity change from 0 to 32768 [ 877.306800][T28331] loop1: detected capacity change from 0 to 128 [ 877.312265][T28303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8810 (28303) [ 877.333381][T28331] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 877.365024][T28303] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 877.388284][T28303] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 877.410643][T28303] BTRFS info (device loop3): using free-space-tree [ 877.438265][T28331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.744834][T18985] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 877.855491][T28362] netlink: 'syz.2.8831': attribute type 1 has an invalid length. [ 878.160598][T28374] (unnamed net_device) (uninitialized): (slave veth0_to_bridge): Device is not bonding slave [ 878.224314][T28374] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0_to_bridge) [ 878.344414][T28378] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.532207][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.540624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.626887][T28394] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8845'. [ 878.680046][T28397] loop2: detected capacity change from 0 to 512 [ 878.701202][T28397] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 878.711713][T28398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.721328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.813435][T28397] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.8847: iget: bad extended attribute block 19 [ 878.838400][T28397] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.8847: couldn't read orphan inode 15 (err -117) [ 878.883545][T28397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.922783][T28397] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 879.052656][T25780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.151953][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.175684][T28418] loop1: detected capacity change from 0 to 256 [ 879.390196][T28423] netlink: 'syz.4.8857': attribute type 42 has an invalid length. [ 880.006517][T28447] loop2: detected capacity change from 0 to 128 [ 880.107294][T28427] loop1: detected capacity change from 0 to 32768 [ 880.150748][ T29] audit: type=1800 audit(1728894770.727:362): pid=28447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8869" name="file2" dev="loop2" ino=1049073 res=0 errno=0 [ 880.232431][ T29] audit: type=1804 audit(1728894770.807:363): pid=28454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8869" name="/newroot/142/file0/file2" dev="loop2" ino=1049073 res=1 errno=0 [ 880.418858][T28427] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 880.575574][T14355] ocfs2: Unmounting device (7,1) on (node local) [ 881.430677][T28463] loop2: detected capacity change from 0 to 40427 [ 881.493817][T28463] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 881.563760][T28463] F2FS-fs (loop2): invalid crc value [ 881.643012][T28463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 881.789783][T28463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 881.978283][ T81] kworker/u8:5: attempt to access beyond end of device [ 881.978283][ T81] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 881.992661][ T81] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 881.999576][ T81] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 882.006578][ T81] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 882.301493][T28517] loop4: detected capacity change from 0 to 512 [ 882.353211][ T2900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.361877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.685952][T28515] loop5: detected capacity change from 0 to 40427 [ 882.710145][T28515] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 882.710157][T28517] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8897: corrupted in-inode xattr: invalid ea_ino [ 882.710651][T28517] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8897: couldn't read orphan inode 15 (err -117) [ 882.724752][T28515] F2FS-fs (loop5): invalid crc value [ 882.761264][T28517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.799087][T28525] loop3: detected capacity change from 0 to 128 [ 882.821975][T28523] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8899'. [ 882.835959][T28515] F2FS-fs (loop5): Found nat_bits in checkpoint [ 882.865071][T28525] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 882.921926][T28525] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 882.947509][T12143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.088409][T28515] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 883.143649][T28533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.178387][T28515] syz.5.8895: attempt to access beyond end of device [ 883.178387][T28515] loop5: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 883.234179][T28540] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_merge_page_bio+0x1e5/0x1540 [ 883.252508][T28539] loop2: detected capacity change from 0 to 2048 [ 883.266948][T28540] syz.5.8895: attempt to access beyond end of device [ 883.266948][T28540] loop5: rw=2049, sector=45192, nr_sectors = 40 limit=40427 [ 883.286436][T28539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.291866][T18985] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 883.313460][T28540] syz.5.8895: attempt to access beyond end of device [ 883.313460][T28540] loop5: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 883.360824][T28542] loop6: detected capacity change from 0 to 7 [ 883.384904][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.431230][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.446888][T28546] loop3: detected capacity change from 0 to 2048 [ 883.461372][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.486873][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.506925][T28546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.516525][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.580391][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.602720][T16440] syz-executor: attempt to access beyond end of device [ 883.602720][T16440] loop5: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 883.631905][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.651185][T28542] ldm_validate_partition_table(): Disk read failed. [ 883.658029][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.659264][T16440] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 883.685064][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.738754][T28542] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.800476][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8912'. [ 883.801457][T28542] Dev loop6: unable to read RDB block 0 [ 883.851737][T28542] loop6: unable to read partition table [ 883.857718][T28542] loop6: partition table beyond EOD, truncated [ 883.892606][T28558] loop2: detected capacity change from 0 to 512 [ 883.951729][T28542] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 883.951729][T28542] ) failed (rc=-5) [ 884.009852][T28558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.061485][T28558] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.190629][T28558] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #2: comm syz.2.8914: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 884.273889][ T2900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.282500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.368983][T28550] loop4: detected capacity change from 0 to 40427 [ 884.377551][T28550] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 884.388576][T28550] F2FS-fs (loop4): invalid crc value [ 884.413463][T28550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 884.445597][T25780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.569376][T28550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 884.739206][ T2900] kworker/u8:8: attempt to access beyond end of device [ 884.739206][ T2900] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 884.788024][ T2900] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 884.805365][ T2900] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 884.813050][ T2900] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 884.921412][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.962370][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8926'. [ 884.982859][T28600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8926'. [ 885.388479][T28607] loop2: detected capacity change from 0 to 1024 [ 885.483049][T28609] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 885.618167][T28601] loop5: detected capacity change from 0 to 32768 [ 885.631563][T28614] syz.2.8931: attempt to access beyond end of device [ 885.631563][T28614] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 886.070632][T28601] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 886.210780][T28616] loop4: detected capacity change from 0 to 32768 [ 886.339852][ T29] audit: type=1800 audit(1728894776.917:364): pid=28616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8934" name="file2" dev="loop4" ino=7 res=0 errno=0 [ 886.470465][T16440] ocfs2: Unmounting device (7,5) on (node local) [ 886.691047][ T29] audit: type=1326 audit(1728894777.247:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 886.713829][ T29] audit: type=1326 audit(1728894777.247:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 886.736390][ T29] audit: type=1326 audit(1728894777.257:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 886.759807][ T29] audit: type=1326 audit(1728894777.257:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 886.783102][ T29] audit: type=1326 audit(1728894777.257:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 886.931306][ T29] audit: type=1326 audit(1728894777.497:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 886.998250][ T29] audit: type=1326 audit(1728894777.497:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 887.098493][ T29] audit: type=1326 audit(1728894777.497:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 887.167021][T28635] loop1: detected capacity change from 0 to 40427 [ 887.244117][T28646] loop5: detected capacity change from 0 to 32768 [ 887.262064][T28646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8949 (28646) [ 887.264750][ T29] audit: type=1326 audit(1728894777.717:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28639 comm="syz.3.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2b1f17dff9 code=0x7ffc0000 [ 887.302875][T28635] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 887.345243][T28635] F2FS-fs (loop1): invalid crc value [ 887.350703][T28646] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 887.361478][T28646] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 887.371067][T28646] BTRFS info (device loop5): using free-space-tree [ 887.433648][T28635] F2FS-fs (loop1): Found nat_bits in checkpoint [ 887.557910][T28635] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 887.749415][ T81] kworker/u8:5: attempt to access beyond end of device [ 887.749415][ T81] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 887.760086][T28687] loop2: detected capacity change from 0 to 256 [ 887.763746][ T81] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 887.763796][ T81] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 887.763830][ T81] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 887.802458][T28687] exfat: Deprecated parameter 'utf8' [ 887.833000][T16440] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 887.851558][T28687] exfat: Deprecated parameter 'namecase' [ 887.857479][T28687] exfat: Deprecated parameter 'namecase' [ 887.863520][T28687] exfat: Deprecated parameter 'utf8' [ 887.883330][T28687] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 888.034104][T28689] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8960'. [ 888.051272][T28689] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8960'. [ 888.072444][T28689] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8960'. [ 888.701079][ T1168] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 888.717569][T28709] lo speed is unknown, defaulting to 1000 [ 888.868532][ T1168] usb 2-1: Using ep0 maxpacket: 32 [ 888.881135][ T5298] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 888.899328][ T1168] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 888.910352][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.945159][ T1168] usb 2-1: config 0 descriptor?? [ 888.974569][ T1168] gspca_main: sq930x-2.14.0 probing 041e:403c [ 889.031247][ T5298] usb 3-1: Using ep0 maxpacket: 16 [ 889.043193][ T5298] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 889.066173][ T5298] usb 3-1: config 0 has no interface number 0 [ 889.105533][ T5298] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 889.124884][T28711] loop5: detected capacity change from 0 to 32768 [ 889.124881][ T5298] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 889.127555][ T5298] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 889.152287][T28711] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8969 (28711) [ 889.164576][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.199624][ T5298] usb 3-1: Product: syz [ 889.203991][ T5298] usb 3-1: Manufacturer: syz [ 889.212581][ T5298] usb 3-1: SerialNumber: syz [ 889.217013][T28711] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 889.225450][ T5298] usb 3-1: config 0 descriptor?? [ 889.238082][T28708] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 889.240713][T28711] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 889.246453][T28708] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 889.295849][T28711] BTRFS info (device loop5): using free-space-tree [ 889.455644][T28708] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 889.466845][T28708] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 889.499551][T16440] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 889.871272][ T1168] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 889.932461][ T1168] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 889.954921][ T1168] usb 2-1: USB disconnect, device number 75 [ 890.099604][ T5298] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 890.110502][ T5298] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 890.122414][ T5298] asix 3-1:0.251: probe with driver asix failed with error -71 [ 890.140306][ T5298] usb 3-1: USB disconnect, device number 57 [ 890.434475][T28753] loop3: detected capacity change from 0 to 4096 [ 890.456817][T28753] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 890.459494][T28758] loop1: detected capacity change from 0 to 128 [ 890.526494][T28758] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 890.561707][T28758] ext4 filesystem being mounted at /947/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 890.771324][T14355] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 890.788358][T28768] loop3: detected capacity change from 0 to 1024 [ 891.407174][T28770] loop2: detected capacity change from 0 to 32768 [ 891.665270][T28772] loop4: detected capacity change from 0 to 32768 [ 891.816625][T28782] loop1: detected capacity change from 0 to 32768 [ 891.827474][T28782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8994 (28782) [ 891.844205][T28772] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 891.859123][T28782] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 891.876959][T28782] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 891.886716][T28782] BTRFS info (device loop1): using free-space-tree [ 892.000502][T28802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8999'. [ 892.017312][T12143] ocfs2: Unmounting device (7,4) on (node local) [ 892.112087][T28809] loop3: detected capacity change from 0 to 512 [ 892.195656][T28809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.230418][T28809] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.346469][T28809] EXT4-fs error (device loop3): ext4_get_first_dir_block:3540: inode #12: block 32: comm syz.3.9004: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 892.430578][T28809] EXT4-fs (loop3): Remounting filesystem read-only [ 892.532916][T18985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.647450][T14355] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 892.853111][T28841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9014'. [ 893.010540][T28847] loop4: detected capacity change from 0 to 2048 [ 893.030010][T28847] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 9) [ 893.143760][T28845] loop3: detected capacity change from 0 to 32768 [ 893.216755][T28845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9016 (28845) [ 893.351302][T28845] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 893.403795][T28845] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 893.416426][T28845] BTRFS info (device loop3): using free-space-tree [ 893.597161][T28855] loop2: detected capacity change from 0 to 1764 [ 893.981282][T28862] netlink: 'syz.1.9020': attribute type 3 has an invalid length. [ 894.115437][T18985] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 894.187870][T28882] PKCS7: Unknown OID: [5] 4.26.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. [ 894.219222][T28882] PKCS7: Only support pkcs7_signedData type [ 894.664953][T28899] loop1: detected capacity change from 0 to 128 [ 894.721315][T28899] EXT4-fs (loop1): Test dummy encryption mode enabled [ 894.760587][T28873] loop2: detected capacity change from 0 to 32768 [ 894.807802][T28899] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 894.831306][T28899] ext4 filesystem being mounted at /955/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 894.918317][T28899] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 894.953043][T28873] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 895.225195][T14355] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 895.245014][T28873] XFS (loop2): Ending clean mount [ 895.267275][T28884] loop5: detected capacity change from 0 to 32768 [ 895.382323][T28884] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 895.519204][T28884] XFS (loop5): Ending clean mount [ 895.526738][T28884] XFS (loop5): Quotacheck needed: Please wait. [ 895.528154][T25780] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 895.554300][T28929] input: syz1 as /devices/virtual/input/input81 [ 895.642474][T28884] XFS (loop5): Quotacheck: Done. [ 1000.670938][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1000.677935][ C0] rcu: 1-...!: (1 GPs behind) idle=4924/1/0x4000000000000000 softirq=119843/119844 fqs=6 [ 1000.690364][ C0] rcu: (detected by 0, t=10505 jiffies, g=120797, q=562 ncpus=2) [ 1000.698182][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1000.698216][ C1] NMI backtrace for cpu 1 [ 1000.698230][ C1] CPU: 1 UID: 0 PID: 28933 Comm: syz.1.9038 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 1000.698256][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1000.698271][ C1] RIP: 0010:lock_release+0x5a/0xa30 [ 1000.698315][ C1] Code: 24 e0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 c7 44 24 60 b3 8a b5 41 48 c7 44 24 68 8b d0 09 8e 48 c7 44 24 70 10 7d 70 81 <4c> 8d 64 24 60 49 c1 ec 03 48 b8 f1 f1 f1 f1 04 f2 00 f2 4b 89 04 [ 1000.698335][ C1] RSP: 0018:ffffc90000a18a60 EFLAGS: 00000086 [ 1000.698357][ C1] RAX: 3b232cf959fe2900 RBX: ffffffff9a6470c8 RCX: 0000000000000002 [ 1000.698375][ C1] RDX: ffff888020735e80 RSI: ffffffff84c29be5 RDI: ffffffff9a6470e0 [ 1000.698393][ C1] RBP: ffffc90000a18b90 R08: 0000000000000003 R09: fffff52000143164 [ 1000.698411][ C1] R10: dffffc0000000000 R11: fffff52000143164 R12: dffffc0000000000 [ 1000.698429][ C1] R13: ffffffff84c29be5 R14: ffffc90000a18bc0 R15: dffffc0000000000 [ 1000.698451][ C1] FS: 00007fab479ff6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1000.698473][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1000.698490][ C1] CR2: 000000110c2cb2c2 CR3: 0000000065724000 CR4: 0000000000350ef0 [ 1000.698509][ C1] Call Trace: [ 1000.698518][ C1] [ 1000.698528][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1000.698563][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1000.698602][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1000.698630][ C1] ? nmi_handle+0x2a/0x5a0 [ 1000.698666][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1000.698699][ C1] ? nmi_handle+0x151/0x5a0 [ 1000.698724][ C1] ? nmi_handle+0x2a/0x5a0 [ 1000.698751][ C1] ? lock_release+0x5a/0xa30 [ 1000.698785][ C1] ? default_do_nmi+0x63/0x160 [ 1000.698816][ C1] ? exc_nmi+0x123/0x1f0 [ 1000.698845][ C1] ? end_repeat_nmi+0xf/0x53 [ 1000.698869][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 1000.698910][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 1000.698944][ C1] ? lock_release+0x5a/0xa30 [ 1000.698980][ C1] ? lock_release+0x5a/0xa30 [ 1000.699017][ C1] ? lock_release+0x5a/0xa30 [ 1000.699052][ C1] [ 1000.699061][ C1] [ 1000.699075][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.699100][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1000.699131][ C1] ? __pfx_lock_release+0x10/0x10 [ 1000.699169][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1000.699203][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.699228][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1000.699267][ C1] _raw_spin_unlock_irqrestore+0x79/0x140 [ 1000.699302][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1000.699345][ C1] debug_object_deactivate+0x2d5/0x390 [ 1000.699381][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1000.699419][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.699444][ C1] ? timerqueue_add+0x260/0x290 [ 1000.699470][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1000.699509][ C1] debug_deactivate+0x1b/0x220 [ 1000.699537][ C1] __hrtimer_run_queues+0x305/0xd50 [ 1000.699567][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1000.699611][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1000.699637][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.699662][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1000.699699][ C1] hrtimer_interrupt+0x396/0x990 [ 1000.699739][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 1000.699767][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1000.699802][ C1] [ 1000.699811][ C1] [ 1000.699820][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1000.699843][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 1000.699879][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 6e 23 2f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 33 c9 93 f5 65 8b 05 44 63 34 74 85 c0 74 43 48 c7 04 24 0e 36 [ 1000.699898][ C1] RSP: 0018:ffffc9000ccb78c0 EFLAGS: 00000206 [ 1000.699918][ C1] RAX: 3b232cf959fe2900 RBX: 1ffff92001996f1c RCX: ffffffff9a3cf903 [ 1000.699937][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: 0000000000000001 [ 1000.699954][ C1] RBP: ffffc9000ccb7958 R08: ffffffff901cf6ef R09: 1ffffffff2039edd [ 1000.699972][ C1] R10: dffffc0000000000 R11: fffffbfff2039ede R12: dffffc0000000000 [ 1000.699990][ C1] R13: 1ffff92001996f18 R14: ffffc9000ccb78e0 R15: 0000000000000246 [ 1000.700019][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1000.700053][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.700082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.700107][ C1] ? __wake_up_locked_key+0xea/0x160 [ 1000.700147][ C1] timerfd_clock_was_set+0x1e0/0x2f0 [ 1000.700172][ C1] ? timerfd_clock_was_set+0x31/0x2f0 [ 1000.700200][ C1] clock_was_set+0x78e/0x810 [ 1000.700229][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 1000.700250][ C1] ? __asan_memcpy+0x40/0x70 [ 1000.700274][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.700299][ C1] ? timekeeping_update+0x3e5/0x450 [ 1000.700330][ C1] ? do_adjtimex+0x51d/0xae0 [ 1000.700362][ C1] timekeeping_inject_offset+0x4e8/0x580 [ 1000.700392][ C1] ? do_adjtimex+0x51d/0xae0 [ 1000.700426][ C1] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 1000.700458][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 1000.700497][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.700525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.700559][ C1] do_adjtimex+0x51d/0xae0 [ 1000.700595][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 1000.700626][ C1] ? __pfx___might_resched+0x10/0x10 [ 1000.700659][ C1] ? __might_fault+0xaa/0x120 [ 1000.700682][ C1] ? __pfx_lock_release+0x10/0x10 [ 1000.700724][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.700750][ C1] ? __might_fault+0xc6/0x120 [ 1000.700775][ C1] __x64_sys_clock_adjtime+0x1e3/0x290 [ 1000.700809][ C1] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 1000.700858][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1000.700896][ C1] ? do_syscall_64+0x100/0x230 [ 1000.700922][ C1] ? do_syscall_64+0xb6/0x230 [ 1000.700947][ C1] do_syscall_64+0xf3/0x230 [ 1000.700974][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.701009][ C1] RIP: 0033:0x7fab47f7dff9 [ 1000.701030][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.701048][ C1] RSP: 002b:00007fab479ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1000.701072][ C1] RAX: ffffffffffffffda RBX: 00007fab48136058 RCX: 00007fab47f7dff9 [ 1000.701089][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1000.701104][ C1] RBP: 00007fab47ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 1000.701120][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.701135][ C1] R13: 0000000000000000 R14: 00007fab48136058 R15: 00007ffc690401a8 [ 1000.701162][ C1] [ 1000.701207][ C0] rcu: rcu_preempt kthread starved for 10475 jiffies! g120797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1001.374622][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1001.384612][ C0] rcu: RCU grace-period kthread stack dump: [ 1001.390506][ C0] task:rcu_preempt state:R running task stack:25888 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1001.402304][ C0] Call Trace: [ 1001.405592][ C0] [ 1001.408539][ C0] __schedule+0x1895/0x4b30 [ 1001.413101][ C0] ? __pfx___schedule+0x10/0x10 [ 1001.417984][ C0] ? __pfx_lock_release+0x10/0x10 [ 1001.423038][ C0] ? __asan_memset+0x23/0x50 [ 1001.427664][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1001.433501][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1001.439863][ C0] ? schedule+0x90/0x320 [ 1001.444135][ C0] schedule+0x14b/0x320 [ 1001.448325][ C0] schedule_timeout+0x1be/0x310 [ 1001.453201][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1001.458599][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1001.463918][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.469570][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1001.475149][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1001.480019][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1001.485261][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1001.491437][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1001.496737][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1001.502667][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.508320][ C0] ? finish_swait+0xd4/0x1e0 [ 1001.512942][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1001.517558][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1001.522772][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1001.528695][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.534348][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1001.539409][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1001.544623][ C0] kthread+0x2f2/0x390 [ 1001.548709][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1001.553920][ C0] ? __pfx_kthread+0x10/0x10 [ 1001.558529][ C0] ret_from_fork+0x4d/0x80 [ 1001.562973][ C0] ? __pfx_kthread+0x10/0x10 [ 1001.567580][ C0] ret_from_fork_asm+0x1a/0x30 [ 1001.572385][ C0] [ 1001.575410][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1001.581739][ C0] CPU: 0 UID: 0 PID: 28939 Comm: syz.3.9045 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 1001.592513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1001.602583][ C0] RIP: 0010:smp_call_function_many_cond+0x1a04/0x2ca0 [ 1001.609369][ C0] Code: 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 ef 0b 00 eb 38 f3 90 42 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 <74> 1e e8 e5 ee 0b 00 eb e4 44 89 e9 80 e1 07 80 c1 03 38 c1 7c e2 [ 1001.628997][ C0] RSP: 0018:ffffc9000c6973e0 EFLAGS: 00000202 [ 1001.635088][ C0] RAX: 0000000000000000 RBX: 1ffff110170e8919 RCX: 0000000000040000 [ 1001.643078][ C0] RDX: ffffc90015dd1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1001.651064][ C0] RBP: ffffc9000c6975e0 R08: ffffffff8188f83a R09: 1ffffffff2859100 [ 1001.659049][ C0] R10: dffffc0000000000 R11: fffffbfff2859101 R12: dffffc0000000000 [ 1001.667035][ C0] R13: ffff8880b87448c8 R14: ffff8880b863fc80 R15: 0000000000000001 [ 1001.675024][ C0] FS: 00007f2b1ffaf6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1001.683971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1001.690565][ C0] CR2: 0000001b2d61eff8 CR3: 000000006f6ea000 CR4: 0000000000350ef0 [ 1001.698553][ C0] Call Trace: [ 1001.701841][ C0] [ 1001.704694][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1001.711050][ C0] ? print_other_cpu_stall+0x1475/0x15b0 [ 1001.716713][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1001.722536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.728186][ C0] ? cgroup_rstat_updated+0x13b/0xc60 [ 1001.733587][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.739236][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1001.745506][ C0] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 1001.750905][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1001.756558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.762208][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 1001.767424][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.773073][ C0] ? acct_account_cputime+0xdd/0x210 [ 1001.778390][ C0] ? update_process_times+0x1ce/0x230 [ 1001.783792][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1001.788929][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1001.794413][ C0] ? __hrtimer_run_queues+0x553/0xd50 [ 1001.799807][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1001.805835][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1001.811575][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.817226][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1001.823328][ C0] ? hrtimer_interrupt+0x396/0x990 [ 1001.828481][ C0] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 1001.834656][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1001.840493][ C0] [ 1001.843435][ C0] [ 1001.846375][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.852554][ C0] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 1001.858731][ C0] ? smp_call_function_many_cond+0x1a04/0x2ca0 [ 1001.864911][ C0] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 1001.870959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.876653][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1001.881718][ C0] ? __pfx___text_poke+0x10/0x10 [ 1001.886677][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.892330][ C0] ? __get_immv32+0x19c/0x350 [ 1001.897038][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1001.903401][ C0] ? __pfx___might_resched+0x10/0x10 [ 1001.908731][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1001.913777][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1001.918908][ C0] text_poke_bp_batch+0x352/0xb30 [ 1001.923963][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1001.929537][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1001.935455][ C0] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 1001.941471][ C0] text_poke_bp+0xb0/0x100 [ 1001.945909][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.951560][ C0] ? __pfx_text_poke_bp+0x10/0x10 [ 1001.956603][ C0] ? trace_contention_end+0x3c/0x120 [ 1001.961908][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.967556][ C0] ? __mutex_lock+0x2ef/0xd70 [ 1001.972249][ C0] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 1001.978261][ C0] __static_call_transform+0x51a/0x810 [ 1001.983741][ C0] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 1001.989749][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1001.996014][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 1002.002022][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1002.007941][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1002.014200][ C0] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 1002.020210][ C0] arch_static_call_transform+0x141/0x380 [ 1002.025959][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1002.032220][ C0] ? __SCT__tp_func_contention_begin+0x8/0x8 [ 1002.038230][ C0] __static_call_update+0xd8/0x5e0 [ 1002.043369][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1002.049636][ C0] ? __pfx___static_call_update+0x10/0x10 [ 1002.055381][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1002.061029][ C0] ? rcu_is_watching+0x15/0xb0 [ 1002.065813][ C0] ? tracepoint_add_func+0x2e4/0x9e0 [ 1002.071118][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1002.076765][ C0] ? tracepoint_add_func+0x49a/0x9e0 [ 1002.082076][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1002.088337][ C0] tracepoint_add_func+0x918/0x9e0 [ 1002.093477][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1002.099740][ C0] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 1002.106704][ C0] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 1002.114183][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1002.120450][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1002.126102][ C0] ? anon_inode_getfile+0xff/0x180 [ 1002.131249][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1002.136897][ C0] ? bpf_probe_register+0x134/0x1f0 [ 1002.142124][ C0] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 1002.147528][ C0] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1002.153477][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1002.159129][ C0] ? fput+0x1a8/0x230 [ 1002.163141][ C0] bpf_raw_tracepoint_open+0x177/0x1f0 [ 1002.168628][ C0] __sys_bpf+0x3c0/0x810 [ 1002.172893][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1002.177694][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1002.183704][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1002.190074][ C0] ? do_syscall_64+0x100/0x230 [ 1002.194955][ C0] __x64_sys_bpf+0x7c/0x90 [ 1002.199392][ C0] do_syscall_64+0xf3/0x230 [ 1002.203916][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.209838][ C0] RIP: 0033:0x7f2b1f17dff9 [ 1002.214266][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.233894][ C0] RSP: 002b:00007f2b1ffaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1002.242334][ C0] RAX: ffffffffffffffda RBX: 00007f2b1f335f80 RCX: 00007f2b1f17dff9 [ 1002.250325][ C0] RDX: 0000000000000010 RSI: 00000000200007c0 RDI: 0000000000000011 [ 1002.258312][ C0] RBP: 00007f2b1f1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1002.266294][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.274275][ C0] R13: 0000000000000000 R14: 00007f2b1f335f80 R15: 00007ffec8d91b48 [ 1002.282281][ C0]